OTL Extras logfile created on: 2013-03-04 21:09:29 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\wirusy
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1,50 Gb Total Physical Memory | 0,96 Gb Available Physical Memory | 63,86% Memory free
3,35 Gb Paging File | 2,94 Gb Available in Paging File | 87,53% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 15,63 Gb Total Space | 4,49 Gb Free Space | 28,70% Space Free | Partition Type: NTFS
Drive D: | 29,30 Gb Total Space | 18,78 Gb Free Space | 64,10% Space Free | Partition Type: NTFS
Drive E: | 29,61 Gb Total Space | 3,84 Gb Free Space | 12,95% Space Free | Partition Type: FAT32
 
Computer Name: USER-D6A980C6EA | User Name: Patryk | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_USERS\S-1-5-21-789336058-1214440339-1417001333-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- "D:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1"
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "d:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "d:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "d:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 1
"FirewallDisableNotify" = 1
"UpdatesDisableNotify" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"D:\Program Files\Warcraft III\Warcraft III.exe" = D:\Program Files\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III
"E:\Program Files\BitComet\BitComet.exe" = E:\Program Files\BitComet\BitComet.exe:*:Enabled:BitComet - a BitTorrent Client
"C:\Program Files\eMule\emule.exe" = C:\Program Files\eMule\emule.exe:*:Enabled:eMule
"C:\Program Files\Gadu-Gadu\gg.exe" = C:\Program Files\Gadu-Gadu\gg.exe:*:Enabled:Gadu-Gadu - program główny
"C:\Program Files\Metin2_PL\metin2.bin" = C:\Program Files\Metin2_PL\metin2.bin:*:Enabled:metin2
"E:\Program Files\Nowe Gadu-Gadu\gg.exe" = E:\Program Files\Nowe Gadu-Gadu\gg.exe:*:Enabled:Nowe Gadu-Gadu beta
"C:\Program Files\Electronic Arts\EADM\Core.exe" = C:\Program Files\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager
"C:\Documents and Settings\Patryk\Pulpit\CabalTemp\ESTSetupLoader.exe" = C:\Documents and Settings\Patryk\Pulpit\CabalTemp\ESTSetupLoader.exe:*:Enabled:EST! download engine
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{1B5A737F-ADEC-46DF-9539-B49D0828A175}" = Gothic
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com
"{7D733D2C-3B78-97E4-2655-DA5F05871045}" = Nero 7 Demo
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{9370105C-71BB-4FF9-A85B-36D79B95457A}_is1" = ALLConverter PRO 1.0
"{9497EBAA-87AD-41E6-8ED6-E1E52995A76C}" = VIA Integrated Setup Wizard
"{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
"{CF40ACC5-E1BB-4aff-AC72-04C2F616BCA7}" = getPlus(R) for Adobe
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0 CE
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"ALLPlayer_is1" = ALLPlayer V4.X
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"DAEMON Tools Toolbar" = DAEMON Tools Toolbar
"Download Accelerator Plus (DAP)" = Download Accelerator Plus (DAP)
"GameSpy Arcade" = GameSpy Arcade
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{9497EBAA-87AD-41E6-8ED6-E1E52995A76C}" = VIA Integrated Setup Wizard
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.4.0 (Full)
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"Plus Internet_is1" = Plus Internet 2.4
"sis163u" = 802.11 USB Wireless LAN Adapter
"SpeedBit Video Accelerator" = SpeedBit Video Accelerator
"SpeedBit Video Downloader" = SpeedBit Video Downloader
"Totalcmd" = Total Commander (Remove or Repair)
"Winamp" = Winamp
"Winamp Toolbar" = Winamp Toolbar
"Windows Media Format Runtime" = Windows Media Format Runtime
"WinRAR archiver" = Archiwizator WinRAR
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"Xfire" = Xfire (remove only)
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2011-01-14 07:42:09 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-14 08:25:49 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-14 19:41:26 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-15 13:56:38 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-15 14:04:33 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-15 14:26:17 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2011-01-16 04:26:43 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2012-10-10 14:07:33 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2012-10-10 13:50:16 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
Error - 2013-03-02 09:15:24 | Computer Name = USER-D6A980C6EA | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd temp2.exe, wersja 0.0.0.0, moduł powodujący
 błąd temp2.exe, wersja 0.0.0.0, adres błędu 0x0000126e.
 
[ System Events ]
Error - 2010-12-15 12:07:23 | Computer Name = USER-D6A980C6EA | Source = ps7apasb | ID = 262145
Description = 
 
Error - 2010-12-15 12:07:23 | Computer Name = USER-D6A980C6EA | Source = ps7apasb | ID = 262145
Description = 
 
Error - 2010-12-15 12:07:23 | Computer Name = USER-D6A980C6EA | Source = ps7apasb | ID = 262145
Description = 
 
Error - 2010-12-15 12:07:23 | Computer Name = USER-D6A980C6EA | Source = ps7apasb | ID = 262145
Description = 
 
Error - 2010-12-27 11:38:59 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842784
Description = Nie można odnaleźć zestawu zależnego Microsoft.VC90.CRT; ostatni błąd:
 Odnośny zestaw nie jest zainstalowany w tym systemie.  
 
Error - 2010-12-27 11:38:59 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly nie powiodło się dla Microsoft.VC90.CRT.  Odpowiedni
 komunikat o błędzie: Odnośny zestaw nie jest zainstalowany w tym systemie.  .
 
Error - 2010-12-27 11:38:59 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842811
Description = Generate Activation Context nie powiodło się dla C:\Program Files\ALLPlayer\LIVE\XVID\xvid.ax.
Odpowiedni
 komunikat o błędzie: Operacja ukończona pomyślnie.  .
 
Error - 2010-12-27 13:18:31 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842784
Description = Nie można odnaleźć zestawu zależnego Microsoft.VC90.CRT; ostatni błąd:
 Odnośny zestaw nie jest zainstalowany w tym systemie.  
 
Error - 2010-12-27 13:18:31 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842811
Description = Resolve Partial Assembly nie powiodło się dla Microsoft.VC90.CRT.  Odpowiedni
 komunikat o błędzie: Odnośny zestaw nie jest zainstalowany w tym systemie.  .
 
Error - 2010-12-27 13:18:31 | Computer Name = USER-D6A980C6EA | Source = SideBySide | ID = 16842811
Description = Generate Activation Context nie powiodło się dla C:\Program Files\ALLPlayer\LIVE\XVID\xvid.ax.
Odpowiedni
 komunikat o błędzie: Operacja ukończona pomyślnie.  .
 
 
< End of report >