OTL Extras logfile created on: 2013-05-07 21:55:49 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\prezes\Pulpit Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,48 Mb Total Physical Memory | 379,87 Mb Available Physical Memory | 49,50% Memory free 1,05 Gb Paging File | 0,76 Gb Available in Paging File | 72,52% Paging File free Paging file location(s): C:\pagefile.sys 350 1000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 2,83 Gb Free Space | 9,67% Space Free | Partition Type: NTFS Drive D: | 78,13 Gb Total Space | 2,18 Gb Free Space | 2,79% Space Free | Partition Type: NTFS Drive E: | 78,13 Gb Total Space | 3,01 Gb Free Space | 3,86% Space Free | Partition Type: NTFS Drive F: | 44,00 Gb Total Space | 3,95 Gb Free Space | 8,98% Space Free | Partition Type: NTFS Drive G: | 2,51 Gb Total Space | 2,50 Gb Free Space | 99,38% Space Free | Partition Type: NTFS Drive H: | 32,76 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Computer Name: TOMEK | User Name: prezes | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_USERS\S-1-5-21-1960408961-115176313-1801674531-1003\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 "UacDisableNotify" = 1 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager -- (Electronic Arts) "C:\Documents and Settings\prezes\Ustawienia lokalne\temp\7zS1.tmp\SymNRT.exe" = C:\Documents and Settings\prezes\Ustawienia lokalne\temp\7zS1.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0ACB1594-6EEC-472F-9B1B-7C8178BBAFEA}" = ETI-pro "{0F43DBD6-4352-4130-8840-A211861259B7}" = Default "{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1 "{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD Video Downloader 3.9.5 "{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs "{2315B23D-3E21-4920-837D-AE6460934ECB}" = FIFA 09 "{26A24AE4-039D-4CA4-87B4-2F83216012FF}" = Java(TM) 6 Update 12 "{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17 "{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1 "{2ED60C17-4568-4CD5-830A-03C4688B09A1}" = Sagem Wi-Fi 11g USB adapter (driver) "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{32A3A4F4-B792-11D6-A78A-00B0D0170170}" = Java SE Development Kit 7 Update 17 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{42622D5F-10EF-4E2E-884C-6F2D3357863E}" = Default "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{584AFAF8-1166-44AA-B780-7C18A2F3C39D}" = Default "{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7D66971C-652B-4065-A6B1-B3EE313C254B}" = BlueJ "{83B43777-B775-4A44-862A-7FD55EE29BC3}" = Default "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A506B28A-8E79-4080-9AFD-A7694AD18B73}" = Default "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) "{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser "{B7C79672-0CE8-4EA1-BEB5-1D9019B9DADB}_is1" = PIT-OPP 2012 wersja 1.0.1 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{EDB0AE65-7ABF-4D96-9F14-CEEAFF715439}" = XLPro2 Polska v2.5.07 -b5 "{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager "{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}" = livebox tp "{FFFF6D5C-E2F1-4B40-BC89-8923312E89EB}}_is1" = ACE Mega CoDecS Pack "2D70ABD4660B7026CB5C4AE8D41B9BEF8067814F" = Pakiet sterowników systemu Windows - Anydata (adusbnet) Net (11/30/2010 1.0.5.5) "ADD65101CC3F2D125B65CD5B8A03323B853686E3" = Pakiet sterowników systemu Windows - Anydata corporation (adusbser) Ports (12/03/2010 2.0.8.0) "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "ATI Display Driver" = ATI Display Driver "BESTplayer" = BESTplayer "Combined Community Codec Pack_is1" = Combined Community Codec Pack 2011-11-11 "Emicsoft MTS Converter_is1" = Emicsoft MTS Converter "FBEF5F3C531F332C65A223F5D1A7C3A1A0111746" = Pakiet sterowników systemu Windows - Anydata corporation (adusbser) Modem (12/03/2010 2.0.8.0) "FLV Player2.0.25" = FLV Player "Fotosizer" = Fotosizer 1.34 "FTDICOMM" = FTDI USB Serial Converter Drivers "Gadu-Gadu 10" = Gadu-Gadu 10 "ie8" = Windows Internet Explorer 8 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Mozilla Firefox 20.0.1 (x86 pl)" = Mozilla Firefox 20.0.1 (x86 pl) "Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition "NVIDIA Drivers" = NVIDIA Drivers "Orange" = Orange "RealAlt_is1" = Real Alternative 1.29 "RealPlayer 16.0" = RealPlayer "Unlocker" = Unlocker 1.9.1 "WIC" = Windows Imaging Component "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = WinRAR 4.20 (32-bitowy) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1960408961-115176313-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:42 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) [ System Events ] Error - 2013-04-05 11:08:53 | Computer Name = TOMEK | Source = W32Time | ID = 39452706 Description = Usługa czas wykryła, że trzeba zmienić czas systemowy o +244897 s. Usługa czasu nie zmieni czasu systemowego o więcej niż +54000 s. Sprawdź, czy czas i strefa czasowa są poprawne i czy źródło czasu time.windows.com (ntp.m|0x1|192.168.0.2:123->65.55.21.15:123) działa poprawnie. Error - 2013-04-05 11:36:42 | Computer Name = TOMEK | Source = W32Time | ID = 39452706 Description = Usługa czas wykryła, że trzeba zmienić czas systemowy o +276616 s. Usługa czasu nie zmieni czasu systemowego o więcej niż +54000 s. Sprawdź, czy czas i strefa czasowa są poprawne i czy źródło czasu time.windows.com (ntp.m|0x1|192.168.0.2:123->65.55.21.14:123) działa poprawnie. Error - 2013-04-08 16:56:30 | Computer Name = TOMEK | Source = Dhcp | ID = 1000 Description = Komputer utracił połączenie dla swojego adresu IP 192.168.0.2 na karcie sieciowej o adresie sieciowym 0014850CB3FB. Error - 2013-04-08 21:41:36 | Computer Name = TOMEK | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1055” podczas próby uruchomienia usługi netman z argumentami „” w celu uruchomienia serwera: {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error - 2013-04-17 14:03:07 | Computer Name = TOMEK | Source = LDMS | ID = 16780239 Description = Usługa menedżera dysków logicznych zawiodła podczas rejestrowania powiadomień obsługi urządzenia \\?\usbstor#cdrom&ven_anydata&prod_mmc_storage&rev_2.31#80e7bca70000&0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}. Błąd systemu Win32: 2. Error - 2013-05-02 12:40:41 | Computer Name = TOMEK | Source = Service Control Manager | ID = 7034 Description = Usługa Ati HotKey Poller niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2013-05-02 12:40:41 | Computer Name = TOMEK | Source = Service Control Manager | ID = 7034 Description = Usługa MBAMScheduler niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2013-05-02 12:40:41 | Computer Name = TOMEK | Source = Service Control Manager | ID = 7034 Description = Usługa Java Quick Starter niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2013-05-06 17:07:15 | Computer Name = TOMEK | Source = Service Control Manager | ID = 7034 Description = Usługa Ati HotKey Poller niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2013-05-06 17:07:15 | Computer Name = TOMEK | Source = Service Control Manager | ID = 7034 Description = Usługa Java Quick Starter niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report >