OTL Extras logfile created on: 2012-08-09 17:43:12 - Run 1 OTL by OldTimer - Version 3.2.56.0 Folder = C:\Users\Cl3an\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 4,00 Gb Total Physical Memory | 3,11 Gb Available Physical Memory | 77,88% Memory free 8,00 Gb Paging File | 7,08 Gb Available in Paging File | 88,55% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 195,21 Gb Total Space | 174,49 Gb Free Space | 89,38% Space Free | Partition Type: NTFS Drive D: | 270,45 Gb Total Space | 263,46 Gb Free Space | 97,42% Space Free | Partition Type: NTFS Computer Name: CL3AN-KOMPUTER | User Name: Cl3an | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{05BF1FB0-FFFD-40B7-BE4B-44BD395F759A}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{07DED73B-53FE-4702-A14E-C5EBCF17FCC4}" = lport=138 | protocol=17 | dir=in | app=system | "{45346433-F9F2-4768-A915-C2D58204751E}" = rport=138 | protocol=17 | dir=out | app=system | "{509E633D-B847-4572-882F-C94DECE54191}" = lport=139 | protocol=6 | dir=in | app=system | "{548C6DCD-4603-4B96-B231-87C1531171B8}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{5DC426B7-79C5-4A4A-A52B-E62C16EB34E4}" = lport=2869 | protocol=6 | dir=in | app=system | "{64723C68-D26B-427A-A9F2-E168CE1FF576}" = rport=10243 | protocol=6 | dir=out | app=system | "{6B0C004F-423D-4131-BD4E-790C43D30917}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{73BC3550-DC9F-4361-883D-17BC289C2D40}" = rport=445 | protocol=6 | dir=out | app=system | "{750E2958-AF92-4973-BA75-8438E1FA2E5E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{89F8D98D-8FA4-4443-8E33-52A08B996440}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{9A3C6798-3CBC-40CB-AFB0-BC2CDF0CC040}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{9E11510A-4D49-4DBE-A579-60F42537D02C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A32459DD-2804-4770-8470-CFADE81B3F49}" = lport=10243 | protocol=6 | dir=in | app=system | "{A937BBE8-C214-4908-AC0B-CB76AE19622F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{BF361C12-DDDF-466D-84D2-6D754E091E8B}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C7ADDBF6-2286-4351-88B7-55D9F13D8492}" = rport=137 | protocol=17 | dir=out | app=system | "{C8569208-70EB-463D-8CE4-9B9B292D83CA}" = rport=139 | protocol=6 | dir=out | app=system | "{C951DB60-76FF-4F54-823E-36AD0B3D0988}" = lport=137 | protocol=17 | dir=in | app=system | "{D7F68B3D-8BAA-4389-8B1F-41BBC9319B55}" = lport=445 | protocol=6 | dir=in | app=system | "{F2D9102B-B226-48C2-A3EA-2C0109EA6C7E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{128111C5-3B7C-4546-9839-605FF0C4FA80}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{178A717D-B25C-4FCD-B7C2-CEB7371B8457}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{1C9C5F5B-2BE4-4DAE-A5D5-F95F172D0F5D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{1D34E947-8B81-453A-99BC-6F335306B57D}" = protocol=6 | dir=out | app=system | "{2B3D6750-D383-424D-A7A2-BC72B1C27D58}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{33D2C893-53C1-4CB3-A73F-40C5B5875BC5}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{41AEDA7C-B84E-47DE-92A8-EF5D0A333AE8}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{45C9ACA8-F651-418C-AF09-6CD019E6C272}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{51AC828A-880E-49B2-8BF3-C7845B81025C}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{5F21802B-03A3-4987-A6DA-7C4057AC63CE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{706BCC4C-4671-496A-AB3D-AD8F4E9F6761}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{7731520B-096D-4B16-91D7-920785417994}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{804B4DDE-22FD-4E00-ABF4-245DB42C0F1E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{858B472F-C839-42A6-B047-EC86B1630AB4}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{884A027E-6D5A-4DC3-A529-043539EC15C4}" = protocol=6 | dir=in | app=d:\programy i gry\utorrent\utorrent.exe | "{B213F236-A0F0-4A92-B20C-1CFBB18689FF}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{BBFA7A33-DE3A-45A4-B285-00D192324DFF}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{C0BB1C3A-F418-4227-AE08-439C79EA5FAD}" = protocol=17 | dir=in | app=d:\programy i gry\utorrent\utorrent.exe | "{CB1414B5-E9AE-490E-9BAF-213F3EF9BA61}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{D03B7A7B-A416-421A-8489-658FE1F38FC0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{D1644544-D86E-4FD6-AAC4-1311828929F2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{D31861E1-8D63-43BD-950F-F1FD9A99DEBE}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{D346A94F-ECE2-446C-8BD9-CFECBFDE173C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{D96306BC-AACE-4E63-918A-F5C62FA6D46B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E11E9B02-064C-4EAD-90CD-CF57A67AA066}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{F5C38AF2-D73F-4E17-85C6-F7DFBA8D3D3F}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe | "{FAB7EB26-3BD8-4F5E-86C6-D682C854A646}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager "HitmanPro36" = HitmanPro 3.6 "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}" = Smite "{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}" = Hi-Rez Studios Authenticate and Update Service "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{DEA314C4-0929-4250-BC92-98E4C105F28D}" = NVIDIA PhysX "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "AVS Screen Capture_is1" = AVS Screen Capture version 2.0.1 "AVS Update Manager_is1" = AVS Update Manager 1.0 "AVS Video Editor_is1" = AVS Video Editor 6 "AVS Video Recorder_is1" = AVS Video Recorder 2.5 "AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4 "BabylonToolbar" = Babylon toolbar on IE "Fraps" = Fraps (remove only) "Gadu-Gadu 10" = Gadu-Gadu 10 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD}" = NVIDIA ForceWare Network Access Manager "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "uTorrent" = µTorrent "uTorrentControl2 Toolbar" = uTorrentControl2 Toolbar "Vtune_is1" = Vtune 7.8 "WinRAR archiver" = WinRAR 4.20 (32-bitowy) [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Google Chrome" = Google Chrome [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-08-08 05:46:23 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-08 09:06:53 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 10:01:17 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 10:14:42 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 10:24:13 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 10:43:37 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 10:58:57 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 11:03:50 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 11:10:00 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = Error - 2012-08-09 11:12:44 | Computer Name = Cl3an-Komputer | Source = WinMgmt | ID = 10 Description = [ System Events ] Error - 2012-08-09 11:42:51 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:42:51 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:42:52 | Computer Name = Cl3an-Komputer | Source = DCOM | ID = 10005 Description = Error - 2012-08-09 11:42:54 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Dostawca grupy domowej zależy od usługi Host dostawcy odnajdowania funkcji, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:43:02 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:43:02 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:43:02 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:44:41 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:44:41 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 Error - 2012-08-09 11:44:41 | Computer Name = Cl3an-Komputer | Source = Service Control Manager | ID = 7001 Description = Usługa Przeglądarka komputera zależy od usługi Serwer, której nie można uruchomić z powodu następującego błędu: %%1068 < End of report >