OTL Extras logfile created on: 2012-11-08 18:29:34 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Ewelina\Desktop Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation Internet Explorer (Version = 7.0.6001.18000) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,99 Gb Total Physical Memory | 0,98 Gb Available Physical Memory | 49,01% Memory free 4,21 Gb Paging File | 3,08 Gb Available in Paging File | 73,15% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 74,45 Gb Total Space | 14,79 Gb Free Space | 19,86% Space Free | Partition Type: NTFS Drive E: | 73,14 Gb Total Space | 19,65 Gb Free Space | 26,87% Space Free | Partition Type: NTFS Computer Name: EWELINA-PC | User Name: Ewelina | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- "E:\programs\office10\Office14\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "E:\programs\office10\Office14\msohtmed.exe" /p %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe" = C:\Program Files\Livebox\Connectivity\ConnectivityManager.exe:*:enabled:CSS -- (France Telecom SA) [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{4E3D096F-793E-489F-A3C6-65498775C196}" = lport=6004 | protocol=17 | dir=in | app=e:\programs\office10\office14\outlook.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{01F68560-9F0D-48F2-82CF-90A25F3DB99E}" = protocol=6 | dir=in | app=c:\program files\canon\dias\cnxdias.exe | "{063616EE-F4D7-4276-91DD-D5741B6B99A6}" = protocol=17 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe | "{1519AE97-7EC5-4029-9FDA-238A5CB561D1}" = protocol=6 | dir=in | app=e:\programs\utorrent\utorrent.exe | "{2A5B5847-ECA2-43E6-B84F-95D81538B6C7}" = protocol=17 | dir=in | app=e:\programs\office10\office14\onenote.exe | "{422EB98C-5210-416C-95DC-84B5BDC3A7DE}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | "{4468ED6A-ED96-45F7-AC2B-A46F38114974}" = protocol=17 | dir=in | app=e:\programs\utorrent\utorrent.exe | "{4DFF4B34-03E9-40A5-97E7-8D3626F2D19D}" = dir=in | app=c:\program files\common files\mcafee\mna\mcnasvc.exe | "{50A59B9C-8FAC-4546-9F18-47699D984CBF}" = protocol=17 | dir=in | app=e:\programs\office10\office14\groove.exe | "{7A03EF80-E914-4E1D-ADC8-88454583F9BA}" = protocol=6 | dir=in | app=e:\programs\office10\office14\onenote.exe | "{7EA979BD-61B5-4EA2-B6A5-1EB4B2BEE913}" = protocol=6 | dir=in | app=c:\program files\sony ericsson\update engine\sony ericsson update engine.exe | "{8383500E-DC66-4D24-8E68-5EF10EDB958B}" = protocol=6 | dir=in | app=e:\programs\office10\office14\groove.exe | "{C2FF7504-953F-4D42-B5F0-841F3616D258}" = dir=in | app=c:\program files\skype\phone\skype.exe | "{DB818FB1-C010-47A1-9E95-B63150AED1E4}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | "{DCC4ECA5-2B4C-42DD-B46C-FE5AE7A8FFBC}" = protocol=17 | dir=in | app=c:\program files\canon\dias\cnxdias.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00000415-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium "{02CA24DD-C8B0-4280-BE53-7862869C2EB1}" = Realtek WiFi Protected Setup Library "{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store "{12B3A009-A080-4619-9A2A-C6DB151D8D67}" = TOSHIBA Assist "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2290A680-4083-410A-ADCC-7092C67FC052}" = Toshiba Online Product Information "{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31 "{2883F6F5-0509-43F3-868C-D50330DD9DD3}" = TOSHIBA Hardware Setup "{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan "{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{37C866E4-AA67-4725-9E95-A39968DD7960}" = Camera Assistant Software for Toshiba "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}" = Google Earth "{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4AE3A0CB-87B0-4F51-BECD-3D1F8DFDD62F}" = SAGEM F@st 800-840 "{4B1E87C3-00DE-4898-8E39-E390AAEF2391}" = TOSHIBA Supervisor Password "{520CD4F0-9DAC-4C5C-8CA1-D0210CFF6062}" = Media Go "{55BDC5EB-A3CF-46D6-9F23-3144436AECAE}" = Podreczniki TOSHIBA "{5980B928-1C95-4B3E-957B-B02D8147FF9E}" = Desktop SMS "{5DA0E02F-970B-424B-BF41-513A5018E4C0}" = TOSHIBA Disc Creator "{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6C5F3BDC-0A1B-4436-A696-5939629D5C31}" = TOSHIBA DVD PLAYER "{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder "{78C6A78A-8B03-48C8-A47C-78BA1FCA2307}" = TOSHIBA ConfigFree "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista "{895722FE-25FE-4854-95AC-B0C42F9DBEDA}" = REALTEK RTL8187B Wireless LAN Driver "{8CA199A8-574E-432F-A98F-A55741E233D1}_is1" = 3GP Player 2010 "{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime "{8EDF23FC-A3FE-4E0F-8FBB-DEB0439D0A44}" = Color Network ScanGear Ver.2.21 "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2010 "{90140000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2010 "{90140000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2010 "{90140000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2010 "{90140000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2010 "{90140000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2010 "{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2010 "{90140000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2010 "{90140000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2010 "{90140000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2010 "{90140000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2010 "{90140000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2010 "{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager "{95A36786-E9A6-4CC8-AE28-29D038DDBDC6}" = Opera 11.52 "{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk "{9FE35071-CAB2-4E79-93E7-BFC6A2DC5C5D}" = CD/DVD Drive Acoustic Silencer "{AC76BA86-7AD7-1045-7B44-A81200000003}" = Adobe Reader 8 - Polish "{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8 "{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan "{B2C61EBB-F47C-48ba-B375-27A40F8F48F7}" = HP Deskjet All-In-One Software 9.0 "{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min "{B5FDA445-CAC4-4BA6-A8FB-A7212BD439DE}" = Microsoft XML Parser "{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}" = TOSHIBA Recovery Disc Creator "{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader "{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series "{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher "{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9 "{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.094 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer "{F214EAA4-A069-4BAF-9DA4-4DB8BEEDE485}" = DVD MovieFactory for TOSHIBA "{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package "{ORAHSS}.UninstallSuite" = Livebox "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "ALLPlayer V3.4.6.2_is1" = ALLPlayer V3.X "ALLPlayer V3.5.6.3_is1" = ALLPlayer V3.X "ALLPlayer_is1" = ALLPlayer V4.X "Ashampoo Burning Studio Elements_is1" = Ashampoo Burning Studio Elements 10.0.9 "CNXT_MODEM_PCI_VEN_14F1&DEV_2C06&SUBSYS_14F10000" = HDAUDIO Soft Data Fax Modem with SmartCP "Cool's_Codec_pack_4.12" = Codec Pack - All In 1 6.0.3.0 "DBDB2B2E231D0260DB18F8EAFCA6C8AE7C206629" = Pakiet sterowników systemu Windows - Sagem, SA (SG762_XP) Net (10/28/2005 6.3.0.0) "eMule" = eMule "Gadu-Gadu 10" = Gadu-Gadu 10 "Google Desktop" = Google Desktop "HDMI" = Intel(R) Graphics Media Accelerator Driver "InstallShield_{617C36FD-0CBE-4600-84B2-441CEB12FADF}" = TOSHIBA Extended Tiles for Windows Mobility Center "InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}" = TRDCReminder "InstallShield_{8EDF23FC-A3FE-4E0F-8FBB-DEB0439D0A44}" = Color Network ScanGear Ver.2.21 "InstallShield_{C730E42C-935A-45BB-A0C5-37E5234D111B}" = TOSHIBA Face Recognition "InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}" = TRORDCLauncher "InstallShield_{FEDD27A0-B306-45EF-BF58-B527406B42C8}" = TOSHIBA Value Added Package "Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile "Mozilla Firefox 10.0.2 (x86 pl)" = Mozilla Firefox 10.0.2 (x86 pl) "MSC" = McAfee SecurityCenter "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OksyTest2000M" = OksyTest 2000 M "Picasa 3" = Picasa 3 "RealAlt_is1" = Real Alternative 2.0.2 "Super Kulki_is1" = Super Kulki "SynTPDeinstKey" = Synaptics Pointing Device Driver "Update Engine" = Sony Ericsson Update Engine "Winamp" = Winamp "Windows Media Encoder 9" = Windows Media Encoder 9 Series "WinRAR archiver" = Archiwizator WinRAR "YdpDict100" = Słownik YDP (angielsko-polski, polsko-angielski) [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1695927881-2794071185-3666444171-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "uTorrent" = µTorrent "Winamp Detect" = Detektor Winampa [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2012-10-17 10:20:25 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-17 10:20:25 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-17 10:20:25 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-17 10:20:25 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-17 10:20:26 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-17 10:20:26 | Computer Name = Ewelina-PC | Source = Windows Search Service | ID = 3013 Description = Error - 2012-10-22 11:29:50 | Computer Name = Ewelina-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2012-10-23 03:08:50 | Computer Name = Ewelina-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083 Description = Error - 2012-10-23 03:09:14 | Computer Name = Ewelina-PC | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd connectivitymanager.exe, wersja 1.1.78.739, sygnatura czasowa 0x484d79a6, moduł powodujący błąd HandlerAuth.dll, wersja 1.1.78.739, sygnatura czasowa 0x484d79d1, kod wyjątku 0xc0000005, przesunięcie błędu 0x000039b3, identyfikator procesu 0x7dc, godzina rozpoczęcia aplikacji 0x01cdb0ecfa34e725. Error - 2012-10-24 03:42:17 | Computer Name = Ewelina-PC | Source = Application Hang | ID = 1002 Description = Program Explorer.EXE w wersji 6.0.6001.18164 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania raportami i rozwiązaniami problemów. Identyfikator procesu: 7c0 Godzina rozpoczęcia: 01cdb1b730c1ee8a Godzina zakończenia: 0 [ System Events ] Error - 2012-11-08 05:50:02 | Computer Name = Ewelina-PC | Source = HTTP | ID = 15016 Description = Error - 2012-11-08 05:51:33 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2012-11-08 05:51:33 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2012-11-08 12:17:57 | Computer Name = Ewelina-PC | Source = HTTP | ID = 15016 Description = Error - 2012-11-08 12:19:30 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2012-11-08 12:19:30 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2012-11-08 13:16:08 | Computer Name = Ewelina-PC | Source = HTTP | ID = 15016 Description = Error - 2012-11-08 13:16:14 | Computer Name = Ewelina-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002 Description = Error - 2012-11-08 13:17:42 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = Error - 2012-11-08 13:17:42 | Computer Name = Ewelina-PC | Source = Service Control Manager | ID = 7000 Description = < End of report >