OTL Extras logfile created on: 2013-07-06 00:57:32 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = D:\Programy\Programy antywirusowe Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 767,48 Mb Total Physical Memory | 269,29 Mb Available Physical Memory | 35,09% Memory free 1,83 Gb Paging File | 1,45 Gb Available in Paging File | 79,02% Paging File free Paging file location(s): C:\pagefile.sys 1152 2304 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 29,29 Gb Total Space | 1,97 Gb Free Space | 6,72% Space Free | Partition Type: NTFS Drive D: | 78,13 Gb Total Space | 2,19 Gb Free Space | 2,80% Space Free | Partition Type: NTFS Drive E: | 78,13 Gb Total Space | 3,01 Gb Free Space | 3,86% Space Free | Partition Type: NTFS Drive F: | 44,00 Gb Total Space | 3,82 Gb Free Space | 8,68% Space Free | Partition Type: NTFS Drive G: | 2,51 Gb Total Space | 2,50 Gb Free Space | 99,39% Space Free | Partition Type: NTFS Drive I: | 1,88 Gb Total Space | 0,88 Gb Free Space | 46,51% Space Free | Partition Type: FAT32 Computer Name: TOMEK | User Name: prezes | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 1 "AntiVirusDisableNotify" = 1 "FirewallDisableNotify" = 1 "FirewallOverride" = 1 "UpdatesDisableNotify" = 1 "UacDisableNotify" = 1 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0ACB1594-6EEC-472F-9B1B-7C8178BBAFEA}" = ETI-pro "{0F43DBD6-4352-4130-8840-A211861259B7}" = Default "{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1 "{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YTD Video Downloader 3.9.5 "{206FD69B-F9FE-4164-81BD-D52552BC9C23}" = GearDrvs "{2315B23D-3E21-4920-837D-AE6460934ECB}" = FIFA 09 "{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 21 "{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1 "{2ED60C17-4568-4CD5-830A-03C4688B09A1}" = Sagem Wi-Fi 11g USB adapter (driver) "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{32A3A4F4-B792-11D6-A78A-00B0D0170170}" = Java SE Development Kit 7 Update 17 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{42622D5F-10EF-4E2E-884C-6F2D3357863E}" = Default "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{584AFAF8-1166-44AA-B780-7C18A2F3C39D}" = Default "{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7D66971C-652B-4065-A6B1-B3EE313C254B}" = BlueJ "{83B43777-B775-4A44-862A-7FD55EE29BC3}" = Default "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90120000-0020-0415-0000-0000000FF1CE}" = Pakiet zgodności dla systemu Office 2007 "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A506B28A-8E79-4080-9AFD-A7694AD18B73}" = Default "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}" = RealNetworks - Microsoft Visual C++ 2010 Runtime "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) "{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser "{B7C79672-0CE8-4EA1-BEB5-1D9019B9DADB}_is1" = PIT-OPP 2012 wersja 1.0.1 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{EDB0AE65-7ABF-4D96-9F14-CEEAFF715439}" = XLPro2 Polska v2.5.07 -b5 "{EF7E931D-DC84-471B-8DB6-A83358095474}" = EA Download Manager "{FC7DDAAE-7F2B-4270-9BFD-5A130B667E9E}" = livebox tp "2D70ABD4660B7026CB5C4AE8D41B9BEF8067814F" = Pakiet sterowników systemu Windows - Anydata (adusbnet) Net (11/30/2010 1.0.5.5) "ADD65101CC3F2D125B65CD5B8A03323B853686E3" = Pakiet sterowników systemu Windows - Anydata corporation (adusbser) Ports (12/03/2010 2.0.8.0) "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "ATI Display Driver" = ATI Display Driver "BESTplayer" = BESTplayer "EASEUS Partition Master Home Edition_is1" = EASEUS Partition Master 9.1.1 Home Edition "Emicsoft MTS Converter_is1" = Emicsoft MTS Converter "FBEF5F3C531F332C65A223F5D1A7C3A1A0111746" = Pakiet sterowników systemu Windows - Anydata corporation (adusbser) Modem (12/03/2010 2.0.8.0) "FLV Player2.0.25" = FLV Player "Fotosizer" = Fotosizer 1.34 "FTDICOMM" = FTDI USB Serial Converter Drivers "Gadu-Gadu 10" = Gadu-Gadu 10 "KLiteCodecPack_is1" = K-Lite Codec Pack 9.9.5 (Full) "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Mozilla Firefox 22.0 (x86 pl)" = Mozilla Firefox 22.0 (x86 pl) "Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition "NVIDIA Drivers" = NVIDIA Drivers "Orange" = Orange "RealAlt_is1" = Real Alternative 1.29 "RealPlayer 16.0" = RealPlayer "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "WinRAR archiver" = WinRAR 4.20 (32-bitowy) [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - CLR: Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 10:54:43 | Computer Name = TOMEK | Source = .NET Runtime | ID = 1023 Description = .NET Runtime version 2.0.50727.3643 - Fatal Execution Engine Error (7A0BCA72) (80131506) Error - 2013-01-09 11:15:34 | Computer Name = TOMEK | Source = .NET Runtime Optimization Service | ID = 1103 Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown [ System Events ] Error - 2013-05-27 16:28:56 | Computer Name = TOMEK | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 31.63.51.143 dla karty sieciowej o adresie 00A0C6000000 został zabroniony przez serwer DHCP 5.185.220.105 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2013-06-01 09:36:54 | Computer Name = TOMEK | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 79.162.203.98 dla karty sieciowej o adresie 00A0C6000000 został zabroniony przez serwer DHCP 188.47.161.33 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2013-06-01 11:48:52 | Computer Name = TOMEK | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 188.47.161.34 dla karty sieciowej o adresie 00A0C6000000 został zabroniony przez serwer DHCP 31.63.42.41 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2013-06-06 10:29:49 | Computer Name = TOMEK | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 31.63.44.121 dla karty sieciowej o adresie 00A0C6000000 został zabroniony przez serwer DHCP 31.63.54.65 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2013-06-17 13:24:04 | Computer Name = TOMEK | Source = Windows Update Agent | ID = 16 Description = Nie można połączyć się: system Windows nie może połączyć się z usługą aktualizacji automatycznych i z tego powodu nie można pobrać i zainstalować aktualizacji zgodnie z ustalonym harmonogramem. System Windows będzie nadal próbował uzyskać połączenie. Error - 2013-07-01 17:06:53 | Computer Name = TOMEK | Source = Cdrom | ID = 262151 Description = W urządzeniu \Device\CdRom0 wystąpił zły blok. Error - 2013-07-01 17:07:00 | Computer Name = TOMEK | Source = Cdrom | ID = 262151 Description = W urządzeniu \Device\CdRom0 wystąpił zły blok. Error - 2013-07-01 17:07:07 | Computer Name = TOMEK | Source = Cdrom | ID = 262151 Description = W urządzeniu \Device\CdRom0 wystąpił zły blok. Error - 2013-07-03 04:21:22 | Computer Name = TOMEK | Source = Dhcp | ID = 1002 Description = Adres IP połączenia 5.185.222.118 dla karty sieciowej o adresie 00A0C6000000 został zabroniony przez serwer DHCP 188.47.136.241 (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2013-07-03 04:35:16 | Computer Name = TOMEK | Source = NETLOGON | ID = 3095 Description = Ten komputer jest skonfigurowany jako członek grupy roboczej, a nie domeny. W tej konfiguracji usługa Netlogon nie musi być uruchamiana. < End of report >