OTL Extras logfile created on: 2011-06-28 21:37:17 - Run 1
OTL by OldTimer - Version 3.2.24.1     Folder = C:\Documents and Settings\Xxx\Pulpit
Windows XP Professional Edition Dodatek Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
503,48 Mb Total Physical Memory | 227,70 Mb Available Physical Memory | 45,23% Memory free
1,20 Gb Paging File | 0,95 Gb Available in Paging File | 79,07% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 20,14 Gb Total Space | 6,97 Gb Free Space | 34,59% Space Free | Partition Type: NTFS
Drive D: | 43,96 Gb Total Space | 43,70 Gb Free Space | 99,43% Space Free | Partition Type: NTFS
Drive E: | 52,73 Gb Total Space | 52,42 Gb Free Space | 99,40% Space Free | Partition Type: NTFS
Drive F: | 32,22 Gb Total Space | 30,91 Gb Free Space | 95,95% Space Free | Partition Type: NTFS
 
Computer Name: XXX-C11B87B7BB9 | User Name: Xxx | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
 
[HKEY_USERS\S-1-5-21-1454471165-606747145-1417001333-1003\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Disabled:Eksplorator Windows -- (Microsoft Corporation)
"C:\Documents and Settings\Xxx\Dane aplikacji\Microsoft\Document Building Blocks\1025\Build\index\ctfmon.pif" = C:\Documents and Settings\Xxx\Dane aplikacji\Microsoft\Document Building Blocks\1025\Build\index\ctfmon.pif:*:Enabled:mIRC
"C:\Program Files\WA-PRO\WF-Mag\wfmag.exe" = C:\Program Files\WA-PRO\WF-Mag\wfmag.exe:*:Enabled:Program WF-Mag -- (Asseco Business Solutions Pion Biznesowy WA-PRO)
"C:\Program Files\Axesstel\AxessManager\AxessManager.exe" = C:\Program Files\Axesstel\AxessManager\AxessManager.exe:*:Enabled:AxessManager Application -- (Axesstel Inc.)
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{28F451B0-44E5-48C0-8706-84114249F5B4}" = LightScribe  1.4.109.1
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition
"{30BB4D60-81DB-11D5-BB77-00400536ABAC}" = OLYMPUS CAMEDIA Master 4.2
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{56B4002F-671C-49F4-984C-C760FE3806B5}" = Microsoft SQL Server VSS Writer
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Graphics Media Accelerator Driver
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 3.7
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-A90000000001}" = Adobe Reader 9 - Polish
"{B52D7A21-03E5-4C0C-82FA-FD8EB4C92149}" = AxessManager
"{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}" = Microsoft SQL Server Native Client
"{BF846EF8-5D1F-4C97-B07F-65D0E3D98A16}" = Stolcad v 12.2
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F9A23406-8ACD-41CB-8A41-5E9EA3FD7B83}" = WF-Mag dla Windows
"{FA200000-0001-0000-0000-074957833700}" = ABBYY PDF Transformer 2.0
"7-Zip" = 7-Zip 4.44 beta
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"ALLPlayer V2.3.1_is1" = ALLPlayer V2.3.1
"Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0
"HP OrderReminder" = HP OrderReminder
"HP-LaserJet 1018" = LaserJet 1018
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"mIRC" = mIRC
"Mozilla Firefox (3.0)" = Mozilla Firefox (3.0)
"NeroMultiInstaller!UninstallKey" = Nero Suite
"Niezbędnik CD_is1" = Niezbędnik CD
"Picasa 3" = Picasa 3
"QuickTime" = QuickTime
"RealAlt_is1" = Real Alternative 1.50
"SkanerOnline" = Skaner on-line mks_vir
"Winamp" = Winamp (remove only)
"WinRAR archiver" = Archiwizator WinRAR
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2011-06-27 00:53:42 | Computer Name = XXX-C11B87B7BB9 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca explorer.exe, wersja 6.0.2900.2180, moduł zawieszenia
 hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2011-06-27 08:13:08 | Computer Name = XXX-C11B87B7BB9 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca IEXPLORE.EXE, wersja 6.0.2900.2180, moduł zawieszenia
 hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2011-06-27 09:33:32 | Computer Name = XXX-C11B87B7BB9 | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd iexplore.exe, wersja 6.0.2900.2180, moduł
 powodujący błąd mshtml.dll, wersja 6.0.2900.2180, adres błędu 0x0007f44d.
 
Error - 2011-06-27 09:42:45 | Computer Name = XXX-C11B87B7BB9 | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca IEXPLORE.EXE, wersja 6.0.2900.2180, moduł zawieszenia
 hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2011-06-27 13:17:45 | Computer Name = XXX-C11B87B7BB9 | Source = SideBySide | ID = 16842784
Description = 
 
Error - 2011-06-27 13:17:45 | Computer Name = XXX-C11B87B7BB9 | Source = SideBySide | ID = 16842811
Description = 
 
Error - 2011-06-27 13:17:45 | Computer Name = XXX-C11B87B7BB9 | Source = SideBySide | ID = 16842811
Description = 
 
Error - 2011-06-27 13:20:42 | Computer Name = XXX-C11B87B7BB9 | Source = crypt32 | ID = 131083
Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej
 aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>,
 wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji
 bieżącego zegara systemowego lub sygnatury czasowej.  
 
Error - 2011-06-27 13:20:42 | Computer Name = XXX-C11B87B7BB9 | Source = crypt32 | ID = 131083
Description = Nie można wyodrębnić głównej listy innych firm z pliku cab automatycznej
 aktualizacji z: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>,
 wystąpił błąd: Wymagany certyfikat jest poza okresem ważności, co wynika z weryfikacji
 bieżącego zegara systemowego lub sygnatury czasowej.  
 
[ System Events ]
Error - 2011-06-28 00:57:17 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 06:45:47 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 07:12:52 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 07:21:10 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 07:24:06 | Computer Name = XXX-C11B87B7BB9 | Source = DCOM | ID = 10010
Description = Serwer {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C} nie zarejestrował się
 w modelu DCOM w wymaganym czasie.
 
Error - 2011-06-28 07:26:06 | Computer Name = XXX-C11B87B7BB9 | Source = DCOM | ID = 10010
Description = Serwer {98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C} nie zarejestrował się
 w modelu DCOM w wymaganym czasie.
 
Error - 2011-06-28 07:28:26 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 08:26:46 | Computer Name = XXX-C11B87B7BB9 | Source = Dhcp | ID = 1000
Description = Komputer utracił połączenie dla swojego adresu IP 192.168.0.2 na karcie
sieciowej
 o adresie sieciowym 0016E66FDB0E.
 
Error - 2011-06-28 15:21:22 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
Error - 2011-06-28 15:35:35 | Computer Name = XXX-C11B87B7BB9 | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi avast! Antivirus z powodu następującego
 błędu:   %%3
 
 
< End of report >