OTL Extras logfile created on: 2012-07-11 20:20:45 - Run 1 OTL by OldTimer - Version 3.2.53.1 Folder = H:\ Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,75 Gb Total Physical Memory | 1,51 Gb Available Physical Memory | 86,62% Memory free 3,60 Gb Paging File | 3,55 Gb Available in Paging File | 98,46% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 48,83 Gb Total Space | 27,75 Gb Free Space | 56,83% Space Free | Partition Type: NTFS Drive D: | 87,89 Gb Total Space | 62,11 Gb Free Space | 70,67% Space Free | Partition Type: NTFS Drive E: | 96,16 Gb Total Space | 53,31 Gb Free Space | 55,44% Space Free | Partition Type: NTFS Drive H: | 1,95 Gb Total Space | 1,95 Gb Free Space | 99,97% Space Free | Partition Type: FAT32 Computer Name: MAT-7A51C3B9DBF | User Name: Administrator | Logged in as Administrator. Boot Mode: SafeMode | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "UpdatesDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Java\jre6\bin\java.exe" = C:\Program Files\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "C:\Program Files\Java\jre6\bin\javaw.exe" = C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.) "E:\Pro Evolution Soccer 2012\pes2012.exe" = E:\Pro Evolution Soccer 2012\pes2012.exe:*:Enabled:Pro Evolution Soccer 2012 -- (Konami Digital Entertainment Co., Ltd.) "C:\Program Files\WapSter\WapSter AQQ\AQQ.exe" = C:\Program Files\WapSter\WapSter AQQ\AQQ.exe:*:Enabled:AQQ Instant Messenger -- (Creative Team S.A.) "C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe" = C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe:*:Enabled:Alcohol iSCSI Service -- (StarWind Software) "E:\FIFA 12\FIFA 12\Game\fifa.exe" = E:\FIFA 12\FIFA 12\Game\fifa.exe:*:Disabled:FIFA 12 -- (Electronic Arts) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00E15D21-B68B-D7C4-574B-636E2D1ECEBE}" = Catalyst Control Center HydraVision Full "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{1170F665-2359-E439-5BC5-932B87423EF1}" = ccc-utility "{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{39D74E81-5DED-C7EE-8807-91A8800212FA}" = ccc-core-preinstall "{3A74298F-5AFC-4C0A-9EE1-70CB0B74AC08}" = ESET NOD32 Antivirus "{41313863-5170-4D7E-AD60-3CDF4DEBA81F}" = Nokia PC Suite "{41C01225-45FD-7BCE-1EDA-F7E50945ADD7}" = Catalyst Control Center Core Implementation "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AA68A73-DB9C-439D-9481-981C82BD008B}" = Nokia Connectivity Cable Driver "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX "{5E8E1294-7951-6DA9-10F1-C877871346F3}" = Skins "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{826F3B4F-C597-AF1D-4CB1-2F441BE8E2BF}" = ccc-core-static "{87B20692-9E9D-FAE0-76C7-E75E3CC7B0D1}" = Catalyst Control Center Graphics Full Existing "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8EA79DBF-D637-448A-89D6-410A087A4493}" = Samsung_MonSetup "{90120000-0010-0415-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Polish) 12 "{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007 "{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007 "{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1) "{ADE91A13-434D-4229-00BC-182BAD607303}" = Need for Speed™ Most Wanted "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver "{C29769BE-BEDF-DC9E-67A9-5E7AEFF039CF}" = CCC Help English "{C740289B-FC90-D938-8317-1FFEBF7C04DB}" = Catalyst Control Center Graphics Previews Common "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding "{DF95F1EE-9ECA-45C1-B02B-F56DDB8A3E83}" = PC Connectivity Solution "{E737A098-F161-4B6F-AF22-86AAE34F6FBD}" = Pro Evolution Soccer 2012 "{E8334783-E2F9-4CA6-86F8-090051418F09}" = Mathcad 13 "{E8AEA11B-E60A-455E-B008-E4E763604612}" = Browser Configuration Utility "{EF3E420F-2DCF-4C24-8E37-896801901045}" = Nero 7 Essentials "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F30A8BF7-288C-57C0-357E-6D67BB694682}" = Catalyst Control Center Graphics Full New "{F54543CF-EC73-D847-1780-84A6420EA229}" = Catalyst Control Center Graphics Light "{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "504244733D18C8F63FF584AEB290E3904E791693" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "72A50F48CC5601190B9C4E74D81161693133E7F7" = Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 7.01.0.9) "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "All ATI Software" = ATI - Software Uninstall Utility "AQQ" = WapSter AQQ "ATI Display Driver" = ATI Display Driver "Browsers Protector" = Browsers Protector "Deluxe Ski Jump_is1" = Deluxe Ski Jump 2.1 "E0AC723A3DE3A04256288CADBBB011B112AED454" = Pakiet sterowników systemu Windows - Nokia Modem (02/25/2011 4.7) "ENTERPRISE" = Microsoft Office Enterprise 2007 "FIFA 12_is1" = FIFA 12 "Football Manager 2012_is1" = Football Manager 2012 "GameDesire-Pool & Snooker" = GameDesire-Pool & Snooker "ie8" = Windows Internet Explorer 8 "JDownloader" = JDownloader "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox 13.0.1 (x86 pl)" = Mozilla Firefox 13.0.1 (x86 pl) "Mozilla Thunderbird 10.0.2 (x86 pl)" = Mozilla Thunderbird 10.0.2 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Nokia PC Suite" = Nokia PC Suite "Totalcmd" = Total Commander (Remove or Repair) "vShare.tv plugin" = vShare.tv plugin 1.3 "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Winamp" = Winamp "Windows Media Format Runtime" = Windows Media Format Runtime "WinRAR archiver" = WinRAR 4.01 (32-bitowy) [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-04-30 12:36:12 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-04-30 13:30:05 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-04-30 14:26:34 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-01 09:30:36 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-01 17:41:04 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-03 09:08:34 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-03 10:31:12 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd AutoRun.exe, wersja 1.7.1.401, moduł powodujący błąd AutoRun.exe, wersja 1.7.1.401, adres błędu 0x00029ffe. Error - 2012-05-03 15:43:55 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-04 14:07:04 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. Error - 2012-05-05 15:12:50 | Computer Name = MAT-7A51C3B9DBF | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd fm.exe, wersja 12.0.3.35043, moduł powodujący błąd fm.exe, wersja 12.0.3.35043, adres błędu 0x00f01f70. [ System Events ] Error - 2012-07-11 12:55:06 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Nero Registry InCD Service z powodu następującego błędu: %%2 Error - 2012-07-11 13:34:53 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Nero Registry InCD Service z powodu następującego błędu: %%2 Error - 2012-07-11 13:37:53 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Nero Registry InCD Service z powodu następującego błędu: %%2 Error - 2012-07-11 14:10:56 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DHCP zależy od usługi NetBios przez TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2012-07-11 14:10:56 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7001 Description = Usługa Klient DNS zależy od usługi Sterownik protokołu TCP/IP, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2012-07-11 14:10:56 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7001 Description = Usługa Pomoc TCP/IP NetBIOS zależy od usługi AFD, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2012-07-11 14:10:56 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7001 Description = Usługa Usługi IPSEC zależy od usługi Sterownik IPSEC, której nie można uruchomić z powodu następującego błędu: %%31 Error - 2012-07-11 14:10:56 | Computer Name = MAT-7A51C3B9DBF | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: AFD AmdK8 ehdrv epfwtdir Fips IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss Tcpip WS2IFSL Error - 2012-07-11 14:12:43 | Computer Name = MAT-7A51C3B9DBF | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi EventSystem z argumentami „” w celu uruchomienia serwera: {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 2012-07-11 14:12:52 | Computer Name = MAT-7A51C3B9DBF | Source = DCOM | ID = 10005 Description = Model DCOM odebrał błąd „%1084” podczas próby uruchomienia usługi netman z argumentami „” w celu uruchomienia serwera: {BA126AE5-2166-11D1-B1D0-00805FC1270E} < End of report >