OTL Extras logfile created on: 2011-01-13 22:49:18 - Run 1
OTL by OldTimer - Version 3.2.20.1     Folder = C:\Users\kasia\Desktop\Serwis
Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6001.18000)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 57,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,30 Gb Total Space | 10,30 Gb Free Space | 35,16% Space Free | Partition Type: NTFS
Drive D: | 154,76 Gb Total Space | 111,99 Gb Free Space | 72,36% Space Free | Partition Type: NTFS
Drive J: | 1,92 Gb Total Space | 0,05 Gb Free Space | 2,76% Space Free | Partition Type: FAT
 
Computer Name: KATKA-PC | User Name: kasia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_USERS\S-1-5-21-518432049-2676681056-226125985-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Odkurz tutaj] -- C:\Program Files\Odkurzacz\odkurzacz.exe %1 (Franmo Software)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-518432049-2676681056-226125985-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1DE6E722-0981-4B27-B7A6-AD55A9312C7A}" = lport=137 | protocol=17 | dir=in | app=system | 
"{1EAAE2EF-7388-4E3C-A23F-4C4D3D229AD7}" = lport=139 | protocol=6 | dir=in | app=system | 
"{27434E8A-D41E-4717-BEBE-3DE315EA8C22}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{4903FD34-294C-4825-9AF8-4EB2F3D220D9}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{6015DD19-B660-4A60-90F3-C0CD770BC5BC}" = lport=445 | protocol=6 | dir=in | app=system | 
"{611187DD-742B-479F-9D60-122BCB0F06F2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{63D4996F-307B-49D2-B0FE-FF65813551B7}" = lport=138 | protocol=17 | dir=in | app=system | 
"{6F95C47C-E2D7-4713-9346-76F376359548}" = rport=445 | protocol=6 | dir=out | app=system | 
"{78C1BEAC-AEEB-4149-B935-3BD9BB1C5517}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{7D87F5F4-553E-4BB6-A559-B93162B3DFEA}" = rport=139 | protocol=6 | dir=out | app=system | 
"{83BEF41B-3C24-498C-93DB-29455A46C940}" = rport=137 | protocol=17 | dir=out | app=system | 
"{8F2FF591-AD66-4B2B-A2BA-08ED77EFC894}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{91CF6141-707B-4EF8-A226-EB472F93DA80}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{9544A1D8-7119-42C5-8737-E46A58E213F0}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{9C9C9180-246F-4C24-AC0B-153C3D5FF07F}" = rport=138 | protocol=17 | dir=out | app=system | 
"{AFCB789B-61E9-4A3C-BCF3-A8A44AD9F612}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{E2DBD1F6-9075-4AFF-AD2D-507CDCA1A47B}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{E8CB93AF-FACF-41A6-9D72-4E368D9B0D44}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0EBBD36B-1304-48C6-A262-AB964DD39ADB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{4CEFDAD2-757F-4647-8A4A-72771E21212D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{CE041948-45B1-46A5-804D-EBBEE9018CD1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{D388FEAB-996E-4271-A261-4C517252A82E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{E8A0A103-2EA5-4080-B539-8E50B3EEAEC6}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{F111454D-630D-4066-9088-C534A0ECC58D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{FB52CAE8-8F1D-45AA-B324-364E541ECF91}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"TCP Query User{1F1C8AA1-652D-4424-BA10-029F24333E79}C:\program files\gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"TCP Query User{23BACF53-2414-4A68-BB93-0094CA64A6CA}D:\program files\ea games\need for speed most wanted\speed.exe" = protocol=6 | dir=in | app=d:\program files\ea games\need for speed most wanted\speed.exe | 
"TCP Query User{3DE9CE17-8854-4E1F-BE1F-9CE046285C7E}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | 
"TCP Query User{486568DB-141C-4ACB-9539-899A22D91CB7}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{51803542-6C35-4E77-8B59-EF17E041FDEF}H:\razor1911\fifa10.exe" = protocol=6 | dir=in | app=h:\razor1911\fifa10.exe | 
"TCP Query User{75A42ACE-5255-4E0F-B0FF-B4E6BD4A59F8}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=6 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"TCP Query User{903DC92C-1438-445E-96FB-ECF9E17B2796}D:\program files\ea games\need for speed most wanted\speed.exe" = protocol=6 | dir=in | app=d:\program files\ea games\need for speed most wanted\speed.exe | 
"TCP Query User{91B2C6B0-3FE4-42FB-A1A4-78CA0C62245B}C:\program files\gadu-gadu 10\gg.exe" = protocol=6 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"TCP Query User{B4E1D2F8-F088-4E2A-A3AE-7D8602BB3F42}C:\program files\tlen.pl\tlen.exe" = protocol=6 | dir=in | app=c:\program files\tlen.pl\tlen.exe | 
"TCP Query User{C2513C85-9B3E-4C72-85C4-720AA1DBBCF9}C:\program files\tmnationsforever\tmforever.exe" = protocol=6 | dir=in | app=c:\program files\tmnationsforever\tmforever.exe | 
"TCP Query User{D7B18838-E8BE-4DD3-9AE9-5A62013BFFF0}C:\program files\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files\ares\ares.exe | 
"UDP Query User{48BADE5A-6B0E-48B5-BF15-6D79B755B284}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | 
"UDP Query User{4CAAE7C2-C328-42C0-92F5-59251DFAB6A7}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{4CD7A0E1-DC85-4D11-9171-1E53791D8234}C:\program files\bearshare applications\bearshare\bearshare.exe" = protocol=17 | dir=in | app=c:\program files\bearshare applications\bearshare\bearshare.exe | 
"UDP Query User{582CF4B6-E413-4068-B762-C977F53FB67E}C:\users\kasia\desktop\picophone164.exe" = protocol=17 | dir=in | app=c:\users\kasia\desktop\picophone164.exe | 
"UDP Query User{655A29A7-0DC4-42BD-8EC6-C2E6129E3FD2}C:\program files\gadu-gadu 10\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu 10\gg.exe | 
"UDP Query User{846A0CE6-2925-4F96-9BB5-039700D08B5F}C:\program files\gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\gadu-gadu\gg.exe | 
"UDP Query User{90736194-2AFD-49DE-BE4A-2D040BA395A2}H:\razor1911\fifa10.exe" = protocol=17 | dir=in | app=h:\razor1911\fifa10.exe | 
"UDP Query User{B70D9239-22AB-46AE-8C14-98F8D045349B}C:\program files\tmnationsforever\tmforever.exe" = protocol=17 | dir=in | app=c:\program files\tmnationsforever\tmforever.exe | 
"UDP Query User{C2974B46-6619-4E82-9269-C56CAEAEA24C}D:\program files\ea games\need for speed most wanted\speed.exe" = protocol=17 | dir=in | app=d:\program files\ea games\need for speed most wanted\speed.exe | 
"UDP Query User{EA9CF81D-077E-4EAD-9BA5-241D0F1A23C9}C:\program files\tlen.pl\tlen.exe" = protocol=17 | dir=in | app=c:\program files\tlen.pl\tlen.exe | 
"UDP Query User{F2A56A3B-5248-408A-A29C-9DFE09473CD0}D:\program files\ea games\need for speed most wanted\speed.exe" = protocol=17 | dir=in | app=d:\program files\ea games\need for speed most wanted\speed.exe | 
"UDP Query User{F3363FE9-D28C-4C19-B437-37D9FCB237BA}C:\program files\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files\ares\ares.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0FB630AB-7BD8-40AE-B223-60397D57C3C9}" = Realtek WLAN Driver
"{11202615-E557-4ECF-9B86-F59C81E52909}" = FIFA 10
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 20
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{311F799A-FCE9-4D9E-B5D2-CBB8859B40BB}" = Microsoft XNA Framework Redistributable 1.0 Refresh
"{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1" = Panda USB Vaccine 1.0.1.4
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{9E35B051-C7EE-47CB-BA43-9A7FFD4E61DE}" = OpenOffice.org 3.1
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{AC76BA86-7AD7-1033-7B44-A91000000001}" = Adobe Reader 9.1
"{F31E509D-3597-324E-83CF-0C160B2320F0}" = Microsoft .NET Framework 3.5 Language Pack - plk
"{F5B6C2F8-9A61-4AF8-AD1A-3B1EDDB00FD5}" = OpenOffice.org 3.0 Language Pack (Polish)
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Ares" = Ares 2.1.1
"BurnAware Free_is1" = BurnAware Free 2.4.1
"CCleaner" = CCleaner
"Download Accelerator Plus (DAP)" = Download Accelerator Plus (DAP)
"Gadu-Gadu 10" = Gadu-Gadu 10
"GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Hidden Recorder" = Hidden Recorder
"iPlus manager_is1" = iPlus manager 2.1
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 4.1.6
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"Microsoft .NET Framework 3.5 Language Pack - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 — PLK
"Mozilla Firefox (3.5.11)" = Mozilla Firefox (3.5.11)
"Odkurzacz 11.3_is1" = Odkurzacz 11.3
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"Sparkle_is1" = Sparkle 1.08
"Winamp" = Winamp
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-518432049-2676681056-226125985-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Winamp Detect" = Detektor Winampa
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2010-04-18 14:10:27 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3012
Description = 
 
Error - 2010-04-18 14:10:27 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3011
Description = 
 
Error - 2010-04-18 15:21:45 | Computer Name = kasia-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 2010-04-18 15:24:50 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3012
Description = 
 
Error - 2010-04-18 15:24:50 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3012
Description = 
 
Error - 2010-04-18 15:24:50 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3011
Description = 
 
Error - 2010-04-19 04:04:03 | Computer Name = kasia-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 2010-04-19 04:06:58 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3012
Description = 
 
Error - 2010-04-19 04:06:58 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3012
Description = 
 
Error - 2010-04-19 04:06:58 | Computer Name = kasia-PC | Source = LoadPerf | ID = 3011
Description = 
 
[ System Events ]
Error - 2011-01-13 16:44:02 | Computer Name = katka-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002
Description = 
 
Error - 2011-01-13 16:44:13 | Computer Name = katka-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description = 
 
Error - 2011-01-13 16:44:54 | Computer Name = katka-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 2011-01-13 17:16:06 | Computer Name = katka-PC | Source = EventLog | ID = 6008
Description = Poprzednie zamknięcie systemu przy 22:14:50 na 2011-01-13 było nieoczekiwane.
 
Error - 2011-01-13 17:16:20 | Computer Name = katka-PC | Source = HTTP | ID = 15016
Description = 
 
Error - 2011-01-13 17:16:25 | Computer Name = katka-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002
Description = 
 
Error - 2011-01-13 17:16:39 | Computer Name = katka-PC | Source = W32Time | ID = 39452726
Description = Usługa czasu napotkała błąd podczas odświeżania swojej konfiguracji
 w rejestrze i nie może się uruchomić. Wystąpił błąd: Odmowa dostępu. (0x80070005)
 
Error - 2011-01-13 17:16:39 | Computer Name = katka-PC | Source = W32Time | ID = 39452718
Description = Usługa czasu napotkała błąd i została zmuszona do zamknięcia. Wystąpił
 błąd: 0x80070005: Odmowa dostępu.  
 
Error - 2011-01-13 17:16:58 | Computer Name = katka-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 2011-01-13 17:17:32 | Computer Name = katka-PC | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001
Description = 
 
 
< End of report >