OTL Extras logfile created on: 2013-11-05 18:45:04 - Run 1
OTL by OldTimer - Version 3.2.56.0     Folder = I:\
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
2,00 Gb Total Physical Memory | 1,63 Gb Available Physical Memory | 81,72% Memory free
4,23 Gb Paging File | 4,02 Gb Available in Paging File | 95,16% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 50,37 Gb Total Space | 9,80 Gb Free Space | 19,46% Space Free | Partition Type: NTFS
Drive D: | 149,05 Gb Total Space | 21,39 Gb Free Space | 14,35% Space Free | Partition Type: NTFS
Drive E: | 90,32 Gb Total Space | 62,96 Gb Free Space | 69,71% Space Free | Partition Type: NTFS
Drive F: | 8,37 Gb Total Space | 1,67 Gb Free Space | 19,97% Space Free | Partition Type: NTFS
Drive I: | 1,92 Gb Total Space | 1,88 Gb Free Space | 97,73% Space Free | Partition Type: NTFS
 
Computer Name: TOMEK-PC | User Name: Tomek | Logged in as Administrator.
Boot Mode: SafeMode | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- "C:\Users\Tomek\AppData\Roaming\File Scout\filescout.exe" /open "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{C00787E1-DA07-47F4-9D02-C978B4DE1139}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05351220-6426-4665-9C06-DF7E742F7280}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\~os32c.tmp\rlvknlg.exe | 
"{33F6BE69-0967-4D0C-AD14-CF691F8C9EB6}" = protocol=6 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{68A7BC77-7CDF-47C6-8ACC-35F473020EFC}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\~oscdac.tmp\rlvknlg.exe | 
"{6ACA8A64-D33D-402E-9C95-5175FDF0A4E2}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{7753CEDA-31FD-4CC7-9FEF-7EDE474397AD}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\~osa2ed.tmp\rlvknlg.exe | 
"{847AA399-F2F9-4562-B119-05993B34FA9A}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\~os77f7.tmp\rlvknlg.exe | 
"{8A683A88-E144-4AAD-A6F6-9CBD4ACDA54D}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{926B5894-5FAF-4A81-A8AF-0524590D358B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe | 
"{992C6F13-BCE4-499E-90BB-8B3416B58067}" = protocol=17 | dir=in | app=c:\program files\activision\prototype\prototypef.exe | 
"{A66374C0-1285-4EFD-8BD1-BC84B2124846}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{B10A0B7F-6DF5-484C-A835-FF0712E55BD3}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{C840A320-938D-4B35-9848-8AE0B05FE7C8}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{CD81B18C-C9A5-460E-A54A-9BFB2731AB2F}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe | 
"{D9E02238-F574-42A5-8216-8D9FB9A20855}" = protocol=6 | dir=in | app=c:\program files\activision\prototype\prototypef.exe | 
"{E9990195-2950-4265-A871-05742E8AA478}" = protocol=17 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"{F98B7073-16AD-4248-A62C-D3DABF00392D}" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\~os9734.tmp\rlvknlg.exe | 
"TCP Query User{1FDFB84E-B74E-4026-BF38-7C08610A3C97}C:\program files\relevantknowledge\rlvknlg.exe" = protocol=6 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
"TCP Query User{A4A200A9-F2CB-4D50-A98F-F10BEDD7ED3C}C:\users\tomek\appdata\local\temp\fvjcrgr.exe" = protocol=6 | dir=in | app=c:\users\tomek\appdata\local\temp\fvjcrgr.exe | 
"UDP Query User{52547435-E057-4F16-8636-BB48BC56302A}C:\users\tomek\appdata\local\temp\fvjcrgr.exe" = protocol=17 | dir=in | app=c:\users\tomek\appdata\local\temp\fvjcrgr.exe | 
"UDP Query User{D7E7520E-2843-4456-B5E7-F55F139602FA}C:\program files\relevantknowledge\rlvknlg.exe" = protocol=17 | dir=in | app=c:\program files\relevantknowledge\rlvknlg.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{069B290F-5398-4629-A009-85B4BCB4B1B9}" = Claro Chrome Toolbar
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{390DD8BB-BB57-4942-A029-2D913E4E9D74}" = Microsoft Security Client
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}" = Nikon Movie Editor
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Obsługa programów Apple
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{83AA2913-C123-4146-85BD-AD8F93971D39}" = BabylonObjectInstaller
"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0015-0415-0000-0000000FF1CE}" = Microsoft Office Access MUI (Polish) 2007
"{90120000-0015-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0415-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Polish) 2007
"{90120000-0016-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0415-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Polish) 2007
"{90120000-0018-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0415-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Polish) 2007
"{90120000-0019-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0415-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Polish) 2007
"{90120000-001A-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0415-0000-0000000FF1CE}" = Microsoft Office Word MUI (Polish) 2007
"{90120000-001B-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0415-0000-0000000FF1CE}" = Microsoft Office Proof (Polish) 2007
"{90120000-001F-0415-0000-0000000FF1CE}_ENTERPRISE_{9CC96D78-9E1D-46E0-AF4D-3EB440CD4619}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0415-0000-0000000FF1CE}" = Microsoft Office Proofing (Polish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0415-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Polish) 2007
"{90120000-0044-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0415-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Polish) 2007
"{90120000-006E-0415-0000-0000000FF1CE}_ENTERPRISE_{0C8AB602-A234-45AB-B355-4C863C1D2FA8}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0415-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Polish) 2007
"{90120000-00A1-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0415-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Polish) 2007
"{90120000-00BA-0415-0000-0000000FF1CE}_ENTERPRISE_{01CC3B2D-70DB-49DC-839A-A923D2A39EA4}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"{95140000-00AF-0415-0000-0000000FF1CE}" = Microsoft PowerPoint Viewer
"{9EFDFBA8-9174-3C61-8645-28376C5CA994}" = Microsoft .NET Framework 3.5 Language Pack SP1 - plk
"{A89768CF-CD21-44FD-A723-16D5A8557415}" = NEF Codec
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.4)
"{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{d08d9f98-1c78-4704-87e6-368b0023d831}" = RelevantKnowledge
"{DB9E4EAB-2717-499F-8D56-4CC8A644AB60}" = MPlayer for Windows (Full Package)
"{E64C137C-D0B7-467A-B47F-460AAB30F0A3}" = ViewNX 2
"{E7388FB7-53D4-4EA5-9E3D-49D2BDBAC2F9}" = LOdev 3.6
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{FAA82903-078D-4335-9E69-213CC04059A3}_is1" = PRO100 Jasno ver 4.16
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Photoshop 7.0 CE" = Adobe Photoshop 7.0 CE
"B7DD3AEC-EFF5-4F71-B16A-EAFF1774733D_is1" = WMA To MP3 10.1.1
"claro" = Claro LTD toolbar  
"C-Media CM106 Like Sound Driver" = USB Multi-Channel Audio Device
"DAEMON Tools Lite" = DAEMON Tools Lite
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Giant Savings" = Giant Savings
"Google Chrome" = Google Chrome
"InstallShield_{9322A850-9091-4D0E-B252-3E82EDA3D94A}" = Prototype(TM)
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 9.7.5
"Microsoft .NET Framework 3.5 Language Pack SP1 - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 z dodatkiem SP1 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft Security Client" = Microsoft Security Essentials
"Multimedia mobilNET" = Multimedia mobilNET
"NVIDIA Drivers" = NVIDIA Drivers
"StartNow Toolbar" = StartNow Toolbar
"uTorrent" = µTorrent
"V9Software" = V9 Homepage Uninstaller
"WinRAR archiver" = WinRAR 4.20 (32-bitowy)
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Video Converter" = Video Converter
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 02:46:48 | Computer Name = Tomek-PC | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2013-11-03 03:11:55 | Computer Name = Tomek-PC | Source = VSS | ID = 8194
Description = 
 
Error - 2013-11-03 05:32:02 | Computer Name = Tomek-PC | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd mobsync.exe, wersja 6.0.6001.18000, sygnatura
 czasowa 0x47918e41, moduł powodujący błąd rlls.dll, wersja 4.0.19.20, sygnatura
 czasowa 0x520e9d36, kod wyjątku 0xc00000fd, przesunięcie błędu 0x0004838e,  identyfikator
 procesu 0x1f84, godzina rozpoczęcia aplikacji 0x01ced8778c30579c.
 
Error - 2013-11-05 13:26:10 | Computer Name = Tomek-PC | Source = Microsoft-Windows-CAPI2 | ID = 131584
Description = 
 
Error - 2013-11-05 13:35:17 | Computer Name = TOMEK-PC | Source = Microsoft-Windows-CAPI2 | ID = 131584
Description = 
 
[ System Events ]
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:42:37 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7026
Description = 
 
Error - 2013-11-05 13:52:22 | Computer Name = Tomek-PC | Source = Service Control Manager | ID = 7001
Description = 
 
Error - 2013-11-05 13:52:22 | Computer Name = Tomek-PC | Source = DCOM | ID = 10005
Description = 
 
Error - 2013-11-05 13:52:22 | Computer Name = Tomek-PC | Source = Microsoft Antimalware | ID = 2001
Description = Produkt %%860 napotkał błąd podczas próby aktualizacji podpisów.     Nowa
 wersja podpisu:      Poprzednia wersja podpisu: 1.161.1313.0     Źródło aktualizacji: %%859

	Etap
 aktualizacji: %%852     Ścieżka źródła: Default URL     Typ podpisu: %%800     Typ aktualizacji:
 %%803     Użytkownik: ZARZĄDZANIE NT\SYSTEM     Bieżąca wersja aparatu:      Poprzednia wersja
 aparatu: 1.1.10003.0     Kod błędu: 0x8007043c     Opis błędu: Tej usługi nie można uruchomić
 w trybie awaryjnym 
 
 
< End of report >