OTL Extras logfile created on: 2011-03-09 13:48:11 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Documents and Settings\Administrator\Pulpit\Logs
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
479,00 Mb Total Physical Memory | 144,00 Mb Available Physical Memory | 30,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 74,00% Paging File free
Paging file location(s): C:\pagefile.sys 1024 1024 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 37,26 Gb Total Space | 11,12 Gb Free Space | 29,84% Space Free | Partition Type: NTFS
Drive E: | 3,74 Gb Total Space | 2,19 Gb Free Space | 58,42% Space Free | Partition Type: NTFS
 
Computer Name: ROBERT | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
"" = 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1947:TCP" = 1947:TCP:*:Enabled:HASP SRM 
"1947:UDP" = 1947:UDP:*:Enabled:HASP SRM 
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll,-22009
"5985:TCP" = 5985:TCP:*:Disabled:Zdalne zarządzanie systemem Windows 
"80:TCP" = 80:TCP:*:Disabled:Zdalne zarządzanie systemem Windows — tryb zgodności (ruch przychodzący HTTP) 
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny
"C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Disabled:Orb
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Winamp Remote\bin\Orb.exe" = C:\Program Files\Winamp Remote\bin\Orb.exe:*:Enabled:Orb
"C:\Program Files\Winamp Remote\bin\OrbTray.exe" = C:\Program Files\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray
"C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe" = C:\Program Files\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07A540AB-D785-11D5-8E89-0090275862A0}" = Corel Graphics Suite 11
"{08111168-1EB1-43A3-B47E-91A014726D3E}" = CDNXL
"{15EE79F4-4ED1-4267-9B0F-351009325D7D}" = HP Software Update
"{1D1E08F2-92F6-4D84-B051-462D6AAF98F8}" = Crystal Reports XI Runtime
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{2B43252C-A1E3-4C47-927C-9F2C276D3515}" = S3GSetup
"{312D3EC7-B18D-49F6-B6FF-995AE0150E95}" = TETA CRM
"{315F5FFC-1A5C-4A2A-B8E7-1C5B1174C198}_is1" = AML Free Registry Cleaner 4.7
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4F44B5AE-82A6-4A8A-A3E3-E24D489728E3}" = Microsoft SQL Server 2008 Native Client
"{51958BA7-21E4-4A8B-9098-CD8375BD17B2}" = Asystent rejestracji usługi Windows Live
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{5AF71003-1797-4D93-9F37-4F2125CBF539}" = Microsoft .NET Framework 2.0 Language Pack - PLK
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack
"{69880C00-08DD-4385-B752-9C62656F6D1E}" = Microsoft SQL Server 2005 Backward compatibility
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{79B986AD-54D8-4498-AA06-89808829ACC0}" = Kaspersky Anti-Virus 6.0 for Windows Workstations
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{91130415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Basic Edition 2003
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1038-7B44-CEA000000001}" = Adobe Reader 6.0.2 CE
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C53A32F7-547C-42BA-ACAD-0D45BEAB472F}" = Crystal Reports 9.0 Runtime
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0EC5B3A-C939-4AD8-B55C-7A8DE0F9A4F4}" = MKR 3
"{EFBD6F61-53E8-4F5F-8B30-1BB65BAD3EE6}" = HP Install Network Printer Wizard
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"BDE_is1" = BDE
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 7.1.0.1078
"CCleaner" = CCleaner
"CobBackup9" = Cobian Backup 9
"Corel Applications" = Corel Applications
"FBDBServer_1_5_is1" = Firebird 1.5.1.4481
"GPL Ghostscript Lite_is1" = GPL Ghostscript Lite 8.70
"hp LaserJet-all-in-one" = hp LaserJet-all-in-one
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{07A540AB-D785-11D5-8E89-0090275862A0}" = CorelDRAW Graphics Suite 11
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"InstallShield_{312D3EC7-B18D-49F6-B6FF-995AE0150E95}" = TETA CRM
"InstallShield_{D0EC5B3A-C939-4AD8-B55C-7A8DE0F9A4F4}" = MKR 3
"InstallWIX_{79B986AD-54D8-4498-AA06-89808829ACC0}" = Kaspersky Anti-Virus 6.0 for Windows Workstations
"iPlus manager_is1" = iPlus manager 2.0
"KONICA MINOLTA bizhub C200 Installer" = KONICA MINOLTA bizhub C200
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - PLK" = Microsoft .NET Framework 2.0 — pakiet języka polskiego
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft SQL Server 2000" = Microsoft SQL Server 2000
"Microsoft SQL Server 2000 (TEST)" = Microsoft SQL Server 2000 (TEST)
"MLklient_is1" = MLklient 1.3.7.12
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Nero - Burning Rom!UninstallKey" = Nero OEM
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"OCS Inventory Agent" = OCS Inventory Agent 4.0.6.1
"RealPlayer 6.0" = RealPlayer
"S3" = UniChrome Pro IGP Display Driver and Utilities
"SkanerOnline" = Skaner on-line mks_vir
"ST6UNST #1" = SC3K dla [Windows XP]
"ST6UNST #2" = SC3K dla [Windows XP] (C:\Program Files\SpedCust3K\)
"VIA/S3G UniChrome Family Win2K/XP Display" = VIA/S3G Display Driver
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"VTDisplay" = S3 S3Display
"VTGamma2" = S3 S3Gamma2
"VTInfo2" = S3 S3Info2
"VTOverlay" = S3 S3Overlay
"VTTrayPlus" = S3 S3TrayPlus
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2011-03-09 04:53:04 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
Error - 2011-03-09 05:00:05 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
Error - 2011-03-09 05:03:12 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
Error - 2011-03-09 05:20:30 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
Error - 2011-03-09 05:22:45 | Computer Name = ROBERT | Source = Internet Explorer 8 | ID = 921877
Description = 
 
Error - 2011-03-09 08:41:59 | Computer Name = ROBERT | Source = Userenv | ID = 1054
Description = System Windows nie może określić nazwy kontrolera domeny tej sieci
 komputerowej. (Określona domena nie istnieje lub nie można się z nią skontaktować.
 ). Przetwarzanie zasad grupy zostało przerwane.
 
Error - 2011-03-09 08:41:59 | Computer Name = ROBERT | Source = AutoEnrollment | ID = 15
Description = Automatyczne rejestrowanie certyfikatów dla system lokalny nie może
 skontaktować się z usługą Active Directory (0x8007054b). Określona domena nie istnieje
 lub nie można się z nią skontaktować.   Rejestrowanie nie zostanie wykonane.
 
Error - 2011-03-09 08:42:08 | Computer Name = ROBERT | Source = Application Error | ID = 1004
Description = Aplikacja powodująca błąd spoolsv.exe, wersja 5.1.2600.6024, moduł
 powodujący błąd unknown, wersja 0.0.0.0, adres błędu 0x01b472fb.
 
Error - 2011-03-09 08:43:17 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
Error - 2011-03-09 08:44:59 | Computer Name = ROBERT | Source = OCS INVENTORY SERVICE | ID = 20
Description = ERROR: OCS Inventory NG Agent encounter an error, exit code is 4.
 
[ System Events ]
Error - 2011-03-09 08:41:59 | Computer Name = ROBERT | Source = NETLOGON | ID = 5719
Description = Dla domeny VERNIDOM nie jest dostępny żaden kontroler domeny z następującego
 powodu:   %%1311.    Upewnij się, że komputer jest podłączony do sieci i ponów próbę.
 Jeśli  problem będzie się powtarzał, skontaktuj się z administratorem domeny.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa Distributed Transaction Coordinator niespodziewanie zakończyła
 pracę. Wystąpiło to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa Cobian Backup 9 proces niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa Firebird Guardian - DefaultInstance niespodziewanie zakończyła
 pracę. Wystąpiło to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa HASP License Manager niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa OCS INVENTORY SERVICE niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa Pml Driver HPZ12 niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa SoundMAX Agent Service niespodziewanie zakończyła pracę. Wystąpiło
 to razy: 1.
 
Error - 2011-03-09 08:47:21 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa MSSQL$TEST niespodziewanie zakończyła pracę. Wystąpiło to razy:
 1.
 
Error - 2011-03-09 08:47:22 | Computer Name = ROBERT | Source = Service Control Manager | ID = 7034
Description = Usługa Firebird Server - DefaultInstance niespodziewanie zakończyła
 pracę. Wystąpiło to razy: 1.
 
 
< End of report >