OTL Extras logfile created on: 2012-04-26 14:46:26 - Run 1 OTL by OldTimer - Version 3.2.42.1 Folder = C:\Documents and Settings\Dom\My Documents\Pobieranie Windows XP Media Center Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.2180) Locale: 00000415 | Country: Poland | Language: PLK | Date Format: yyyy-MM-dd 1,44 Gb Total Physical Memory | 0,99 Gb Available Physical Memory | 68,80% Memory free 3,29 Gb Paging File | 2,97 Gb Available in Paging File | 90,27% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 60,00 Gb Total Space | 9,48 Gb Free Space | 15,81% Space Free | Partition Type: NTFS Drive D: | 51,78 Gb Total Space | 45,97 Gb Free Space | 88,79% Space Free | Partition Type: NTFS Computer Name: DOM-399BD11551D | User Name: Dom | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = All Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [HKEY_USERS\S-1-5-21-117609710-1450960922-839522115-1003\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* http [open] -- Reg Error: Key error. https [open] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Przeglądaj w XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" (XnView, http://www.xnview.com) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\Winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\Winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "57748:TCP" = 57748:TCP:*:Enabled:Pando Media Booster "57748:UDP" = 57748:UDP:*:Enabled:Pando Media Booster [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "57748:TCP" = 57748:TCP:*:Enabled:Pando Media Booster "57748:UDP" = 57748:UDP:*:Enabled:Pando Media Booster "7420:UDP" = 7420:UDP:*:Enabled:bleee [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Gadu-Gadu 10\gg.exe" = C:\Program Files\Gadu-Gadu 10\gg.exe:*:Enabled:Gadu-Gadu 10 -- (GG Network S.A.) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) "C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Winamp\winamp.exe" = C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.) "C:\Program Files\Pando Networks\Media Booster\PMB.exe" = C:\Program Files\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- () "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" = C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe:*:Enabled:LogMeIn Hamachi -- (LogMeIn Inc.) "C:\Program Files\HydraIRC\HydraIRC.exe" = C:\Program Files\HydraIRC\HydraIRC.exe:*:Enabled:HydraIRC -- (Hydra Productions) "D:\LC.exe" = D:\LC.exe:*:Enabled:LastChaosPoland "C:\Program Files\AVG\AVG2012\avgmfapx.exe" = C:\Program Files\AVG\AVG2012\avgmfapx.exe:*:Enabled:Instalator AVG "C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Counter-Strike 1.6 KPS\hl.exe" = C:\Program Files\Counter-Strike 1.6 KPS\hl.exe:*:Enabled:Half-Life Launcher -- (Valve) "C:\Program Files\Ask.com\UpdateTask.exe" = C:\Program Files\Ask.com\UpdateTask.exe:*:Disabled:UpdateTask -- () "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation) "C:\WINDOWS\explorer.exe" = C:\WINDOWS\explorer.exe:*:Enabled:Windows Explorer -- (Microsoft Corporation) "C:\Program Files\Ask.com\Updater\Updater.exe" = C:\Program Files\Ask.com\Updater\Updater.exe:*:Disabled:Ask Updater -- (Ask) "C:\Program Files\Norton Security Scan\Engine\3.7.1.4\Nss.exe" = C:\Program Files\Norton Security Scan\Engine\3.7.1.4\Nss.exe:*:Disabled:Norton Security Scan -- (Symantec Corporation) "C:\Program Files\Norton Security Scan\Engine\3.7.1.4\SymCCISE.exe" = C:\Program Files\Norton Security Scan\Engine\3.7.1.4\SymCCISE.exe:*:Disabled:SymCCIS -- (Symantec Corporation) "C:\Documents and Settings\Dom\Local Settings\Apps\F.lux\flux.exe" = C:\Documents and Settings\Dom\Local Settings\Apps\F.lux\flux.exe:*:Disabled:flux -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0A2A5039-B37F-489D-B1DC-A5258DF9E697}" = FIFA 08 "{1612AFFB-23A1-43CE-9E6A-69CF40991571}_is1" = Rappelz "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F77C418-2C90-459C-BD33-B56A4182B9FA}" = System Requirements Lab CYRI "{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon "{26A24AE4-039D-4CA4-87B4-2F83216024FF}" = Java(TM) 6 Update 26 "{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0 "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{33286280-8617-11E1-8FF6-B8AC6F97B88E}" = Google Earth Plug-in "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{64CB2553-C109-4132-AA51-1F421B515FD1}" = Microsoft .NET Framework 1.1 Polish Language Pack "{7F2F3F8B-2D57-48A3-99D0-1AC23D594C89}" = LightScribe 1.4.56.1 "{80280415-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional z programem FrontPage - Beta "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A56028FC-1F40-4369-9941-7AAAC6ACE924}" = LastChaosPoland "{A642BB6B-CA1D-4142-8DD4-318C3F3DC834}" = Rome - Total War(TM) "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5 "{AB6F4AB9-AC85-4002-9829-B6EEA55AE3A5}" = Microsoft Visual C++ 2005 Express Edition - ENU "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1) "{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver "{adc9960e-3602-45da-84a1-ff6e24ab72d5}" = Nero 9 Essentials "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CB594326-2A81-4B1D-AE5B-AA14FE09B1EE}" = Overwolf "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D9ECBC61-0D76-4EDD-8D46-BB2BB0A02108}" = Localization Pack for Microsoft Windows XP Media Center Edition "{E2494AD8-314D-44F8-B39C-4358A60DC184}" = LogMeIn Hamachi "{EBBB1DEF-8878-4CB8-BC0D-1196B30E7527}" = 1503 A.D. "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F86B5FF0-E0C0-41AA-9FD3-5E9090FED323}" = Mumble 1.2.3 "{FFFF6D5C-E2F1-4B40-BC89-8923312E89EB}}_is1" = ACE Mega CoDecS Pack "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "ALLPlayer_is1" = ALLPlayer V4.X "ATI Display Driver" = ATI Display Driver "BabylonToolbar" = Babylon toolbar on IE "CCleaner" = CCleaner "Counter-Strike 1.6 KPS 1.2" = Counter-Strike 1.6 KPS 1.2 "DAEMON Tools Lite" = DAEMON Tools Lite "Floris Mod Pack_is1" = Floris Mod Pack 2.5 "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "Game Booster_is1" = Game Booster "Gutscheinmieze - Toolbar" = Gutscheinmieze - Toolbar "HydraIRC" = HydraIRC "LogMeIn Hamachi" = LogMeIn Hamachi "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware wersja 1.51.2.1300 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended "Microsoft Visual C++ 2005 Express Edition - ENU" = Microsoft Visual C++ 2005 Express Edition - ENU "Mozilla Firefox 11.0 (x86 pl)" = Mozilla Firefox 11.0 (x86 pl) "Need for Speed Underground 2" = Need for Speed Underground 2 "NeroMultiInstaller!UninstallKey" = Nero Suite "NFS Carbon PL_is1" = NFS Carbon PL 1.1 "NSS" = Norton Security Scan "OpenAL" = OpenAL "PhotoScape" = PhotoScape "RealAlt_is1" = Real Alternative 2.0.2 Lite "The KMPlayer" = The KMPlayer (remove only) "uTorrent" = µTorrent "WIC" = Windows Imaging Component "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "WinGimp-2.0_is1" = GIMP 2.6.11 "WinRAR archiver" = Archiwizator WinRAR "XnView_is1" = XnView 1.98.2 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-117609710-1450960922-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "CodeBlocks" = CodeBlocks "Flux" = F.lux "UnityWebPlayer" = Unity Web Player "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ System Events ] Error - 2012-04-26 08:33:48 | Computer Name = DOM-399BD11551D | Source = DCOM | ID = 10010 Description = Serwer {7F6316B4-4D69-4765-B0A3-B2598F2FA80A} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error - 2012-04-26 08:34:48 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:34:54 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:36:27 | Computer Name = DOM-399BD11551D | Source = DCOM | ID = 10010 Description = Serwer {7F6316B4-4D69-4765-B0A3-B2598F2FA80A} nie zarejestrował się w modelu DCOM w wymaganym czasie. Error - 2012-04-26 08:36:53 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:38:02 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:38:04 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:38:09 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:38:09 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7023 Description = Usługa Network Location Awareness (NLA) zakończyła działanie; wystąpił następujący błąd: %%127 Error - 2012-04-26 08:52:30 | Computer Name = DOM-399BD11551D | Source = Service Control Manager | ID = 7034 Description = Usługa LogMeIn Hamachi Tunneling Engine niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report >