OTL Extras logfile created on: 2010-12-15 01:26:06 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Maria\Downloads Windows Vista Home Basic Edition (Version = 6.0.6000) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18904) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 47,00% Memory free 4,00 Gb Paging File | 3,00 Gb Available in Paging File | 71,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 465,76 Gb Total Space | 421,14 Gb Free Space | 90,42% Space Free | Partition Type: NTFS Computer Name: MARIA-FU | User Name: Maria | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "AntiVirusOverride" = 0 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "FirewallOverride" = 0 "UpdatesDisableNotify" = 0 "UacDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "oobe_av" = 1 "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 1 "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{3D0F9D0A-948C-48AF-A28C-235AD1F8A850}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service | "{BFA28EFA-DF61-47CB-84D0-20FC13E55706}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | "{C718D079-25F1-4381-A8A5-2121E8C42E3B}" = lport=2869 | protocol=6 | dir=in | app=system | "{DB881911-58A7-493F-873A-120DBBA1A3FC}" = lport=67 | protocol=17 | dir=in | name=dhcp discovery service | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1007697B-D98B-4CD5-B273-9F35FC99A576}" = protocol=6 | dir=in | app=c:\users\maria\downloads\windows6.0-kb936330-x86-wave1.exe | "{3ECCEB4B-189A-4D07-8112-545FDF4EFAFE}" = protocol=17 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe | "{6BC3E883-DC0D-47B3-A88F-F1A1D9145709}" = protocol=17 | dir=in | app=c:\users\maria\downloads\windows6.0-kb936330-x86-wave1.exe | "{D8B9553D-1054-46A5-91E2-5D9654D9BE6E}" = protocol=6 | dir=in | app=c:\program files\common files\pure networks shared\platform\nmsrvc.exe | "TCP Query User{DF2128DF-18FA-4859-BA30-38197067C1E3}C:\program files\nowe gadu-gadu\gg.exe" = protocol=6 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | "UDP Query User{2D6A61E1-65D7-4879-96BE-84910D75AD68}C:\program files\nowe gadu-gadu\gg.exe" = protocol=17 | dir=in | app=c:\program files\nowe gadu-gadu\gg.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{05381030-963D-4779-BECA-0D7D49268EDB}" = Płatnik 8.01.001 "{089DD780-DB3F-4CDB-A0C2-111360247298}" = PC Connectivity Solution "{108FAA6F-DEEE-48EA-B3A9-1C5EB2605A6B}" = PL "{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Narzędzie do przekazywania usługi Windows Live "{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18 "{284BD984-6E5C-4586-80A8-14D85E233497}" = Linksys EasyLink Advisor "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support "{44C29075-93A3-4B7F-8208-021DBB65E3B3}_is1" = QPrinter Bookmaker 2 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E98F23B-1328-4322-A6EC-2EDC8FC3A4FE}" = FontNav "{4ECA710C-B818-4751-A3B8-42C2D93922A8}" = Nokia Software Updater "{521AAD14-5030-44BB-8B0E-5CE65FCE57E0}" = InterVideo DeviceService "{616E8966-0574-4E9E-A9CD-9CB819EBC162}" = KONICA MINOLTA TWAIN Ver.3 "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2 "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7C5123A9-30A8-4C44-89CA-A8C87A1FCC91}" = CorelDRAW Graphics Suite X3 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{85F411A3-2C4F-4CDE-B848-EA3E243AF23E}" = OpenOfficeT7 2.3.1 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007 "{90120000-0016-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007 "{90120000-0018-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007 "{90120000-0019-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007 "{90120000-001A-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007 "{90120000-001B-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{79EB535E-76E4-4356-8146-A24EE55AB69D}" = Microsoft Office 2007 Service Pack 2 (SP2) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_SMALLBUSINESSR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_SMALLBUSINESSR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007 "{90120000-001F-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{E9EA2604-8AC9-47D2-8F4B-6BF60787A357}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) "{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007 "{90120000-006E-0415-0000-0000000FF1CE}_SMALLBUSINESSR_{D45F91DE-F0FC-4D5F-9A0C-FDE5B251AAC6}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-00CA-0000-0000-0000000FF1CE}" = Microsoft Office Small Business 2007 "{91120000-00CA-0000-0000-0000000FF1CE}_SMALLBUSINESSR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2) "{91120000-00CA-0000-0000-0000000FF1CE}_SMALLBUSINESSR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581) "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9862473C-E063-4C68-A161-2CDE0E8048A5}" = Podstawowe programy Windows Live "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support "{AC76BA86-7AD7-1045-7B44-A80000000000}" = Adobe Reader 8 - Polish "{ADE16A9D-FBDC-4ecc-B6BD-9C31E51D303B}" = A4 TECH PC Camera H "{B194272D-1F92-46DF-99EB-8D5CE91CB4EC}" = Adobe AIR "{C09B6CDD-E34E-4735-9B54-A8000A26E46B}_is1" = Video Download Studio 3.3.5 "{C34FAEF3-4241-4C4E-9CFF-7BBD8BCEABE7}" = WebEx Support Manager for Internet Explorer "{C94E45B0-6AA6-4FB9-9AAE-22085F631880}" = VBA "{C9507D0D-1A9C-486E-91D6-33A71CCA55F2}" = Pure Networks Platform "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CE3B8E96-B0AF-4871-9178-1519B58E3A93}" = A4 TECH PC Camera H "{D0846526-66DD-4DC9-A02C-98F9A2806812}" = Launch Manager V1.4.9 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D1803CD4-0CE7-4484-98E3-88D7A2D629A4}" = Windows Live Messenger "{D85E93D8-BF44-4BE5-962D-EB8EFDACC073}" = KONICA MINOLTA HDD TWAIN Ver.3 "{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver "{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager "{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = VideoStudio "504244733D18C8F63FF584AEB290E3904E791693" = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0) "9CF25B327FC690237C04DD3EAD264E80564C757F" = Windows Driver Package - Summa (SUMMAUSB) USB (11/11/2008 6.3) "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "Audacity_is1" = Audacity 1.2.6 "Cucusoft Ultimate Video Converter_is1" = Cucusoft Ultimate Video Converter 8.03 "ESET Online Scanner" = ESET Online Scanner v3 "GAMEFORGE Nostale(UK)_is1" = Nostale Online UK (Remove) "HDMI" = Intel(R) Graphics Media Accelerator Driver "InstallShield_{284BD984-6E5C-4586-80A8-14D85E233497}" = Linksys EasyLink Advisor "InstallShield_{F99F9E24-EE2F-47FD-AEB0-FDB82859B5C9}" = Ulead VideoStudio 11 "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13) "Nokia PC Suite" = Nokia PC Suite "Notowania OnLine 3 BM Alior Bank_is1" = Notowania OnLine 3 BM Alior Bank "Nowe Gadu-Gadu" = Nowe Gadu-Gadu "openclipart" = Open Clip Art Library "PhotoScape" = PhotoScape "PITy 2009_is1" = PITy 2009 dla Windows kompilacja:1.1.0.1 "Redirection Port Monitor" = RedMon - Redirection Port Monitor "SMALLBUSINESSR" = Microsoft Office Small Business 2007 "SubEdit - Vista WMP Patch_is1" = SubEdit - Vista WMP Patch "SubEdit-Player_is1" = SubEdit-Player "SynTPDeinstKey" = Synaptics Pointing Device Driver "Visa Widget" = Visa Widget 2.14 "Wacom Tablet Driver" = Wacom Tablet "Windows Media Encoder 9" = Windows Media Encoder 9 Series "WinLiveSuite_Wave3" = Podstawowe programy Windows Live "WinPcapInst" = WinPcap 4.1.1 "WinRAR archiver" = Archiwizator WinRAR "Zestaw Klipartów dla OpenOfficePL Eplus" = Zestaw Klipartów dla OpenOfficePL Eplus 1.0 [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 2010-12-14 19:37:45 | Computer Name = Maria-fu | Source = Perflib | ID = 1010 Description = Error - 2010-12-14 19:37:47 | Computer Name = Maria-fu | Source = Perflib | ID = 1008 Description = Error - 2010-12-14 19:37:53 | Computer Name = Maria-fu | Source = usbperf | ID = 2004 Description = Zbieranie danych sterownika usbperf nie powiodło się. Wywołano funkcję Collect z nieobsługiwanym typem kwerendy. Error - 2010-12-14 19:40:28 | Computer Name = Maria-fu | Source = usbperf | ID = 2004 Description = Zbieranie danych sterownika usbperf nie powiodło się. Wywołano funkcję Collect z nieobsługiwanym typem kwerendy. Error - 2010-12-14 19:46:16 | Computer Name = Maria-fu | Source = usbperf | ID = 2004 Description = Zbieranie danych sterownika usbperf nie powiodło się. Wywołano funkcję Collect z nieobsługiwanym typem kwerendy. Error - 2010-12-14 19:54:07 | Computer Name = Maria-fu | Source = SecurityCenter | ID = 3 Description = Usługa Centrum zabezpieczeń systemu Windows nie może ustanowić kwerend dotyczących zdarzeń z usługi WMI, aby monitorować program antywirusowy, program antyszpiegowski i zaporę innej firmy. Error - 2010-12-14 19:58:36 | Computer Name = Maria-fu | Source = WinMgmt | ID = 10 Description = Error - 2010-12-14 20:14:04 | Computer Name = Maria-fu | Source = WinMgmt | ID = 10 Description = Error - 2010-12-14 20:17:45 | Computer Name = Maria-fu | Source = WinMgmt | ID = 10 Description = Error - 2010-12-14 20:19:34 | Computer Name = Maria-fu | Source = SecurityCenter | ID = 3 Description = Usługa Centrum zabezpieczeń systemu Windows nie może ustanowić kwerend dotyczących zdarzeń z usługi WMI, aby monitorować program antywirusowy, program antyszpiegowski i zaporę innej firmy. [ OSession Events ] Error - 2010-04-22 09:29:06 | Computer Name = Maria-fu | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6514.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 4397 seconds with 720 seconds of active time. This session ended with a crash. [ System Events ] Error - 2010-03-06 13:23:19 | Computer Name = Maria-fu | Source = bowser | ID = 8003 Description = Error - 2010-03-06 15:41:05 | Computer Name = Maria-fu | Source = DCOM | ID = 10010 Description = Error - 2010-03-08 07:50:52 | Computer Name = Maria-fu | Source = Dhcp | ID = 1002 Description = Serwer DHCP 192.168.1.1 odmówił dzierżawy adresu IP 192.168.1.104 dla karty sieciowej o adresie 0016441EE268. (Serwer DHCP wysłał komunikat DHCPNACK). Error - 2010-03-08 08:29:12 | Computer Name = Maria-fu | Source = bowser | ID = 8003 Description = Error - 2010-03-08 12:35:29 | Computer Name = Maria-fu | Source = DCOM | ID = 10010 Description = Error - 2010-03-08 15:12:09 | Computer Name = Maria-fu | Source = DCOM | ID = 10010 Description = Error - 2010-03-08 15:12:10 | Computer Name = Maria-fu | Source = DCOM | ID = 10010 Description = Error - 2010-03-08 15:12:10 | Computer Name = Maria-fu | Source = DCOM | ID = 10000 Description = Error - 2010-03-08 16:10:59 | Computer Name = Maria-fu | Source = EventLog | ID = 6008 Description = Poprzednie zamknięcie systemu przy 21:09:38 na 2010-03-08 było nieoczekiwane. Error - 2010-03-08 16:20:10 | Computer Name = Maria-fu | Source = DCOM | ID = 10010 Description = < End of report >