OTL Extras logfile created on: 2011-05-30 21:28:32 - Run 1
OTL by OldTimer - Version 3.2.23.0     Folder = E:\
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
502,11 Mb Total Physical Memory | 216,79 Mb Available Physical Memory | 43,18% Memory free
1,20 Gb Paging File | 0,98 Gb Available in Paging File | 81,53% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 9,77 Gb Total Space | 0,13 Gb Free Space | 1,30% Space Free | Partition Type: NTFS
Drive D: | 46,12 Gb Total Space | 16,30 Gb Free Space | 35,33% Space Free | Partition Type: NTFS
Drive E: | 1,95 Gb Total Space | 1,95 Gb Free Space | 99,88% Space Free | Partition Type: FAT
 
Computer Name: WINDOWZ | User Name: Doris | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
.inf [@ = inffile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()
.ini [@ = inifile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()
.txt [@ = txtfile] -- C:\WINDOWS\System32\NOTEPAD.EXE ()
 
[HKEY_USERS\S-1-5-21-1614895754-73586283-1177238915-1002\SOFTWARE\Classes\<extension>]
.exe [@ = exefile] -- "C:\Documents and Settings\Doris\Ustawienia lokalne\Dane aplikacji\xaq.exe" -a "%1" %*
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 ()
batfile [open] -- "%1" %*
batfile [print] -- Reg Error: Key error.
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 ()
cmdfile [open] -- "%1" %*
cmdfile [print] -- Reg Error: Key error.
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 ()
inffile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 ()
inifile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 ()
inifile [print] -- Reg Error: Key error.
jsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 ()
jsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 ()
jsefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 ()
jsefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 ()
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\NOTEPAD.EXE %1 ()
regfile [merge] -- Reg Error: Key error.
regfile [print] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 ()
txtfile [print] -- Reg Error: Key error.
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" ()
vbefile [edit] -- %SystemRoot%\System32\Notepad.exe %1 ()
vbefile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 ()
vbsfile [edit] -- %SystemRoot%\System32\Notepad.exe %1 ()
vbsfile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 ()
wsffile [edit] -- %SystemRoot%\System32\Notepad.exe %1 ()
wsffile [print] -- %SystemRoot%\System32\Notepad.exe /p %1 ()
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /k cd "%L" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [openNew] -- explorer %1 (Microsoft Corporation)
Directory [StyleFolder] -- "C:\Program Files\StyleFolder\StyleFolder.exe" %1 (Xaviorsoft Studios)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"AntiVirusOverride" = 1
"FirewallDisableNotify" = 1
"FirewallOverride" = 1
"UpdatesDisableNotify" = 1
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 3
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- (MusicLab, LLC)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare -- (MusicLab, LLC)
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 17
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{5F624839-947D-46EA-BD63-FD847C1AC6F1}" = BearShare
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}" = TIPCI
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{878CDC75-04C7-41A3-9033-43250D3D37B4}" = FlashFolder
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8BD6DD52-2F49-4E35-B678-71E1E7D286DB}" = ESET NOD32 Antivirus
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (Polish) 12
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{9CC89556-3578-48DD-8408-04E66EBEF401}" = mXML
"{9DC696F3-BEDF-4069-A18D-89B41BF89769}" = Command Prompt Explorer Bar
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{AC76BA86-7AD7-1045-7B44-A94000000001}" = Adobe Reader 9.4.3 - Polish
"{AF4C3085-F089-4A30-9B78-8012465030BD}" = Patch
"{B502B428-3386-40A9-98DB-079AAB72E64F}" = mEoU
"{C93C7A4B-7DD9-4725-9993-4F032063926B}_is1" = VPX.PL Uploader 1.0
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 SP1
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{EAEAAF8C-8E86-4CAC-AC08-1A33EDCA34AC}" = Prince of Persia® Zapomniane Piaski
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{FC8D21C8-7B29-4104-ADB0-FEE9CA1C7922}" = Folder Size for Windows
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"AbiWord2" = AbiWord 2.8.1
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AIMP2" = AIMP2
"BearShare" = BearShare
"CCleaner" = CCleaner
"CNXT_HDAUDIO" = Conexant HD Audio
"CPLBonus" = Kels' CPL Bonus Pack!
"Deep Space 3D Screensaver" = Deep Space 3D Screensaver
"Defraggler" = Defraggler
"Driver Magician_is1" = Driver Magician 3.45
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Everest Poker" = Everest Poker (Remove Only)
"Gadu-Gadu 10" = Gadu-Gadu 10
"HashCheck Shell Extension" = HashCheck Shell Extension (x86-32)
"HFSLIPTotalSlipstream" = HFSLIP Total Slipstream (v1.7.8, build 80614)
"InstallShield_{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}" = Texas Instruments PCIxx21/x515/xx12 drivers.
"IrfanView" = IrfanView (remove only)
"Kazaa Lite Rewolucja_is1" = Kazaa Lite Rewolucja 2.6
"kazaalite202_is1" = Kazaa Lite K++ v2.4.3
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.4.4
"Koi Fish 3D Screensaver" = Koi Fish 3D Screensaver
"LClock" = LClock
"Mechanical Clock 3D Screensaver" = Mechanical Clock 3D Screensaver
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"neostradatp.exe" = neostrada tp
"Opera 11.01.1190" = Opera 11.01
"ParadisePoker" = ParadisePoker
"PLAY ONLINE" = PLAY ONLINE
"Prio" = Prio v1.9.9.1732
"qt7lite_is1" = QT Lite 3.0.0
"RegCompact Pro" = RegCompact Pro 2.6.7
"Revo Uninstaller" = Revo Uninstaller 1.83
"StmAdsl" = ADSL Modem
"StyleFolder_is1" = StyleFolder 1.0.3
"SwitchOff" = Switch Off
"Szybkie Pisanie_is1" = Szybkie Pisanie v1.3.0.2
"Total Copy 1.1 NetHorror Edition" = Total Copy 1.1 NetHorror Edition
"Visual Task Tips" = Visual Task Tips 3.4
"Vivid WorkshopData ATI" = Vivid WorkshopData ATI
"vjpeg" = VJPEG Image Viewer (remove)
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mprosafe.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mwlssafe.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mmhouse.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mpfmgr.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mpfwiz.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\miwa.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mxml.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mlogview.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mhelp.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
Error - 2011-05-30 13:29:33 | Computer Name = WINDOWZ | Source = MsiInstaller | ID = 1008
Description = Instalacja elementu g:\wireless_for_intel_(10.1.0.13)\5du0131e\apps\iprodata\mzconfig.msi
 jest niedozwolona z powodu błędu w przetwarzaniu zasad ograniczających oprogramowanie.
 Obiektowi nie można zaufać.
 
[ System Events ]
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:29:50 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
MSIServer z argumentami „”  w celu uruchomienia serwera:  {000C101C-0000-0000-C000-000000000046}
 
Error - 2011-05-30 13:30:26 | Computer Name = WINDOWZ | Source = DCOM | ID = 10005
Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi 
EventSystem z argumentami „”  w celu uruchomienia serwera:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
 
< End of report >