OTL Extras logfile created on: 2012-11-11 16:27:42 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ryta\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
3,00 Gb Total Physical Memory | 2,39 Gb Available Physical Memory | 79,62% Memory free
6,19 Gb Paging File | 5,78 Gb Available in Paging File | 93,28% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 63,48 Gb Total Space | 22,40 Gb Free Space | 35,29% Space Free | Partition Type: NTFS
Drive D: | 225,73 Gb Total Space | 204,41 Gb Free Space | 90,56% Space Free | Partition Type: NTFS
Drive E: | 8,88 Gb Total Space | 2,74 Gb Free Space | 30,81% Space Free | Partition Type: NTFS
Drive F: | 687,93 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: LAPTOP | User Name: Ryta | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-116309507-2613915133-1753515728-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [napiprojekt] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" ()
Directory [napiprojekt0] -- "C:\Program Files\NapiProjekt\napisy.exe" "%1" -pobierz_ang ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{176A21AD-2110-4B4D-98B5-05668AE018C8}" = lport=445 | protocol=6 | dir=in | app=system | 
"{39A5BF03-60E9-41A0-964D-7D15880C2EFA}" = lport=139 | protocol=6 | dir=in | app=system | 
"{3FC1853F-78EA-4887-9912-FB8D539381DC}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{513D9787-9E83-4498-996D-04BE0FA180B4}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{7E2A158D-3D58-479F-A9D8-E52C0FB97E84}" = rport=445 | protocol=6 | dir=out | app=system | 
"{88D0CDB5-258B-4560-8D7C-4A8402FA862F}" = lport=138 | protocol=17 | dir=in | app=system | 
"{9BF873ED-88DB-4E30-9CFC-34021716C0E0}" = lport=137 | protocol=17 | dir=in | app=system | 
"{C78BC440-F721-49BF-BFC7-0ED0C37F6654}" = rport=138 | protocol=17 | dir=out | app=system | 
"{EAE03CD7-B7B7-44FB-9ACF-75C07F6642D7}" = rport=137 | protocol=17 | dir=out | app=system | 
"{F9042C15-4111-4C1F-ACDF-36E85FD18284}" = rport=139 | protocol=6 | dir=out | app=system | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{199B9946-0B55-4906-A90B-9B11977922CD}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{239B2550-6BCD-4564-9353-596F6D807A0A}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe | 
"{381B46FD-B4D0-4F7C-9F83-A3C0A5683633}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{4AD59028-3C1B-44B0-81C5-71A94155477A}" = protocol=6 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{7CC9FAC8-7A9A-478C-B529-94D49950BAC3}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{8480FAA0-965C-444C-9E6B-7EEC0732A6C1}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{9EBF8E83-3D86-4D64-8D47-70DEA2E71487}" = protocol=17 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{A66FA5B3-943B-4ECC-AADF-85608E57AD5A}" = protocol=6 | dir=in | app=c:\windows\system32\arfc\wrtc.exe | 
"{B6C10947-8C2E-4CA8-8F02-D502DB9F78E7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{B73DDC8F-9041-4A6E-819B-46FF0135B205}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{F017CE73-346E-4882-8D8F-8BFA209B79D3}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{F2100E79-6E9D-484E-9469-9079270A27A9}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe | 
"{F55D8967-C344-4D64-8013-5FDD46B6AF61}" = protocol=17 | dir=in | app=c:\windows\system32\dmwu.exe | 
"{F8CC8C56-7130-498C-8817-EC00A9FCD179}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{FB680798-C5B8-4DF4-889B-5A04AE21CCF3}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1AD48A61-45C4-4C71-8BA5-C4DD44B23116}" = Baldur's Gate
"{26A24AE4-039D-4CA4-87B4-2F83216027FF}" = Java(TM) 6 Update 29
"{26A24AE4-039D-4CA4-87B4-2F83217000F0}" = Java(TM) 7
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{336D0C35-8A85-403a-B9D2-65C292C39087}_is1" = Web Assistant 2.0.0.478
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 H2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{47F3EDF5-C821-49E6-B9B3-D00BF0A9BAB8}" = DigitalPersona Personal 4.11
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7F362F06-A9A3-440F-8B19-6A01A72723C4}" = AuthenTec Fingerprint Sensor Minimum Install
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_HOMESTUDENTR_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_HOMESTUDENTR_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_HOMESTUDENTR_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A12EA295-32EA-42BB-8442-2C2BE852D4AA}" = inSSIDer 2.0
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Polish
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}" = PlayReady PC Runtime x86
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE67AE10-CBE9-44ED-80C3-80044B560676}_is1" = GoPlayer version 3.6.0
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{E5F05232-96B6-4552-A480-785A60A94B21}" = System Requirements Lab CYRI
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"BabylonToolbar" = Babylon toolbar on IE
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"funmoods" = Funmoods Web Search
"Gadu-Gadu 10" = Gadu-Gadu 10
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"incredibar" = Incredibar Toolbar  on IE and Chrome
"ipla" = ipla 2.3.4
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"MoorHunt_is1" = MoorHunt 0.6.7.2
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 16.0.2 (x86 pl)" = Mozilla Firefox 16.0.2 (x86 pl)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NapiProjekt_is1" = NapiProjekt 2.0.0 (build 2028)
"NIS" = Norton Internet Security
"NVIDIA Drivers" = NVIDIA Drivers
"SMSERIAL" = Motorola SM56 Data Fax Modem
"Software Plate" = Software Plate
"The KMPlayer" = The KMPlayer (remove only)
"Totalcmd" = Total Commander (Remove or Repair)
"uTorrent" = µTorrent
"uTorrentControl2 Toolbar" = uTorrentControl2 Toolbar
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinRAR archiver" = WinRAR 4.01 (32-bitowy)
"WNLT" = Web Optimizer
"XP Codec Pack" = XP Codec Pack
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-116309507-2613915133-1753515728-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = KMPlayer Toolbar Updater
"Google Chrome" = Google Chrome
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2012-08-26 13:20:26 | Computer Name = Laptop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2012-08-26 13:20:26 | Computer Name = Laptop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2012-08-26 13:20:26 | Computer Name = Laptop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2012-08-26 13:40:06 | Computer Name = Laptop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2012-08-26 13:40:06 | Computer Name = Laptop | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2012-08-28 13:18:09 | Computer Name = Laptop | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd CivilizationV_DX11.exe, wersja 1.0.1.348,
 sygnatura czasowa 0x4e144f4e, moduł powodujący błąd d3dx9_42.dll, wersja 6.0.6002.18541,
 sygnatura czasowa 0x4ec3e3d5, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d,
identyfikator
 procesu 0x1714, godzina rozpoczęcia aplikacji 0x01cd8541121d1657.
 
Error - 2012-08-28 13:18:51 | Computer Name = Laptop | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd CivilizationV.exe, wersja 1.0.1.348, sygnatura
 czasowa 0x4e144f09, moduł powodujący błąd d3dx9_42.dll, wersja 6.0.6002.18541, 
sygnatura czasowa 0x4ec3e3d5, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d,
identyfikator
 procesu 0x1154, godzina rozpoczęcia aplikacji 0x01cd85412c9583f7.
 
Error - 2012-08-28 13:20:15 | Computer Name = Laptop | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd CivilizationV_DX11.exe, wersja 1.0.1.348,
 sygnatura czasowa 0x4e144f4e, moduł powodujący błąd d3dx9_42.dll, wersja 6.0.6002.18541,
 sygnatura czasowa 0x4ec3e3d5, kod wyjątku 0xc0000135, przesunięcie błędu 0x00009f5d,
identyfikator
 procesu 0xe94, godzina rozpoczęcia aplikacji 0x01cd854160d02e97.
 
Error - 2012-08-28 13:32:08 | Computer Name = Laptop | Source = VSS | ID = 8194
Description = 
 
Error - 2012-08-28 13:33:26 | Computer Name = Laptop | Source = System Restore | ID = 8193
Description = 
 
[ System Events ]
Error - 2012-11-11 09:45:25 | Computer Name = Laptop | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-11 09:45:25 | Computer Name = Laptop | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 2012-11-11 11:21:56 | Computer Name = Laptop | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 16:12:27 na 2012-11-11 było nieoczekiwane.
 
Error - 2012-11-11 11:22:25 | Computer Name = Laptop | Source = DCOM | ID = 10005
Description = 
 
Error - 2012-11-11 11:22:30 | Computer Name = Laptop | Source = DCOM | ID = 10005
Description = 
 
Error - 2012-11-11 11:22:31 | Computer Name = Laptop | Source = DCOM | ID = 10005
Description = 
 
Error - 2012-11-11 11:22:33 | Computer Name = Laptop | Source = DCOM | ID = 10005
Description = 
 
Error - 2012-11-11 11:22:43 | Computer Name = Laptop | Source = DCOM | ID = 10005
Description = 
 
Error - 2012-11-11 11:23:24 | Computer Name = Laptop | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2012-11-11 11:23:24 | Computer Name = Laptop | Source = Service Control Manager | ID = 7026
Description = 
 
 
< End of report >