OTL Extras logfile created on: 2011-01-17 21:14:40 - Run 1 OTL by OldTimer - Version 3.2.20.2 Folder = C:\Documents and Settings\LUK\Pulpit Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 511,00 Mb Total Physical Memory | 277,00 Mb Available Physical Memory | 54,00% Memory free 1,00 Gb Paging File | 1,00 Gb Available in Paging File | 77,00% Paging File free Paging file location(s): C:\pagefile.sys 768 1536 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 17,58 Gb Total Space | 15,03 Gb Free Space | 85,51% Space Free | Partition Type: NTFS Drive D: | 94,20 Gb Total Space | 85,26 Gb Free Space | 90,50% Space Free | Partition Type: NTFS Drive G: | 74,52 Gb Total Space | 1,14 Gb Free Space | 1,53% Space Free | Partition Type: NTFS Computer Name: TO-48BB36752B3B | User Name: LUK | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 "UacDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "FirewallOverride" = 0 "UpdatesDisableNotify" = 0 "UacDisableNotify" = 0 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 "DisableNotifications" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "G:\atuk.exe" = G:\atuk.exe:*:Enabled:ipsec "G:\Programy\cyberbajt_RT2561\RT2561.exe" = G:\Programy\cyberbajt_RT2561\RT2561.exe:*:Enabled:ipsec "C:\WINDOWS\Explorer.EXE" = C:\WINDOWS\Explorer.EXE:*:Enabled:ipsec -- (Microsoft Corporation) "C:\DOCUME~1\LUK\USTAWI~1\Temp\winfbuh.exe" = C:\DOCUME~1\LUK\USTAWI~1\Temp\winfbuh.exe:*:Enabled:ipsec -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{FAB1F336-1B7C-4057-A7BC-2922CD82A781}" = Ralink Wireless LAN Card "avast!" = avast! Antivirus [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2011-01-17 15:34:16 | Computer Name = TO-48BB36752B3B | Source = Application Hang | ID = 1002 Description = Aplikacja zawieszająca IEXPLORE.EXE, wersja 6.0.2900.2180, moduł zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000. [ System Events ] Error - 2011-01-17 15:42:38 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:42:44 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.0.0.1 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:42:46 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:42:51 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:42:52 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:42:56 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:43:20 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:43:34 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:43:35 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2011-01-17 15:43:36 | Computer Name = TO-48BB36752B3B | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 0.0.0.0 dla karty sieciowej o adresie 000E2EA83CA1 został zabroniony przez serwer DHCP 10.57.1.33 (Serwer DHCP wysłał komunikat DHCPNACK). < End of report >