OTL Extras logfile created on: 2014-03-11 16:05:01 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\Paulina\Moje dokumenty
Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
 
1012,06 Mb Total Physical Memory | 206,11 Mb Available Physical Memory | 20,36% Memory free
2,37 Gb Paging File | 1,26 Gb Available in Paging File | 53,22% Paging File free
Paging file location(s): C:\pagefile.sys 1512 3024 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
Drive C: | 97,65 Gb Total Space | 77,76 Gb Free Space | 79,63% Space Free | Partition Type: NTFS
Drive D: | 200,43 Gb Total Space | 196,95 Gb Free Space | 98,27% Space Free | Partition Type: NTFS
 
Computer Name: PAULINA-NETBOOK | User Name: Paulina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = OperaStable] -- C:\Program Files\Opera\Launcher.exe (Opera Software)
 
[HKEY_USERS\S-1-5-21-682003330-839522115-527237240-1003\SOFTWARE\Classes\<extension>]
.html [@ = OperaStable] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\launcher.exe" -noautoupdate "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"UpdatesDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[color=#E56717]========== System Restore Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Documents and Settings\Paulina\Dane aplikacji\BitTorrent\BitTorrent.exe" = C:\Documents and Settings\Paulina\Dane aplikacji\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent -- (BitTorrent Inc.)
"C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS9.tmp\SymNRT.exe" = C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS9.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool
"C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS8.tmp\SymNRT.exe" = C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS8.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool
"C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS1.tmp\SymNRT.exe" = C:\Documents and Settings\Paulina\Ustawienia lokalne\Temp\7zS1.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool
"C:\Program Files\Steam\SteamApps\common\Half-Life\hl.exe" = C:\Program Files\Steam\SteamApps\common\Half-Life\hl.exe:*:Enabled:Counter-Strike -- (Valve)
"C:\Program Files\Steam\SteamApps\common\Giana Sisters Twisted Dreams\launcher\GSLauncher.exe" = C:\Program Files\Steam\SteamApps\common\Giana Sisters Twisted Dreams\launcher\GSLauncher.exe:*:Enabled:Giana Sisters: Twisted Dreams -- ()
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{036FD544-AED6-3F33-856D-A2292D0CF471}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - PLK
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 51
"{321320E1-0E5A-36CB-9E52-F3B201B8C4D4}" = Microsoft .NET Framework 4 Client Profile PLK Language Pack
"{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52E225FC-FCB4-41F7-837B-6E37FB05BD7B}" = Adobe AIR
"{5C19E2DC-4CCF-3114-B40A-6E565987025F}" = Microsoft .NET Framework 4 Extended PLK Language Pack
"{634EF75E-C274-4B7F-8A7D-0439FB694AA8}" = ESET Smart Security
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7C77393F-8237-3825-A88A-AFAF3C69C072}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - PLK
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1045-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Polish
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EA1493A8-A9B8-4947-B5B6-35457717B75A}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F31E509D-3597-324E-83CF-0C160B2320F0}" = Microsoft .NET Framework 3.5 Language Pack - plk
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 12 Plugin
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.00.0.0502
"Microsoft .NET Framework 3.5 Language Pack - plk" = Pakiet językowy programu Microsoft .NET Framework 3.5 — PLK
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended PLK Language Pack" = Polski pakiet językowy dla programu Microsoft .NET Framework 4 Extended
"Odkurzacz 13.4_is1" = Odkurzacz
"Opera 20.0.1387.64" = Opera Stable 20.0.1387.64
"Razer Game Booster_is1" = Razer Game Booster
"Steam" = Steam
"Steam App 10" = Counter-Strike
"Steam App 223220" = Giana Sisters: Twisted Dreams
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WinRAR archiver" = WinRAR 5.00 (32-bit)
"WsysControl" = Wsys Control 10.2.1.2652
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-682003330-839522115-527237240-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"BitTorrent" = BitTorrent
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2013-12-30 18:46:23 | Computer Name = PAULINA-NETBOOK | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca ts3client_win32.exe, wersja 3.0.13.0, moduł
 zawieszenia hungapp, wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2013-12-31 12:08:05 | Computer Name = PAULINA-NETBOOK | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca hl.exe, wersja 1.1.1.1, moduł zawieszenia hungapp,
 wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2014-01-07 17:28:03 | Computer Name = PAULINA-NETBOOK | Source = Application Hang | ID = 1002
Description = Aplikacja zawieszająca hl.exe, wersja 1.1.1.1, moduł zawieszenia hungapp,
 wersja 0.0.0.0, adres zawieszenia 0x00000000.
 
Error - 2014-01-09 15:30:45 | Computer Name = PAULINA-NETBOOK | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd hl.exe, wersja 1.1.1.1, moduł powodujący
 błąd mss32.dll, wersja 9.3.0.0, adres błędu 0x00025fc9.
 
Error - 2014-01-13 17:58:25 | Computer Name = PAULINA-NETBOOK | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd hl.exe, wersja 1.1.1.1, moduł powodujący
 błąd , wersja 9.3.0.0, adres błędu 0x00025fc9.
 
Error - 2014-02-02 07:29:59 | Computer Name = PAULINA-NETBOOK | Source = Userenv | ID = 1512
Description = System Windows nie może zwolnić pliku rejestru. Pamięć używana przez
 ten rejestr nie została zwolniona. Najczęstszą tego przyczyną są usługi uruchamiane
 z konta użytkownika. Próbuj skonfigurować te usługi, aby były uruchamiane z konta
 LocalService lub NetworkService. Jeśli ten problem będzie się powtarzać, skontaktuj
 się z administratorem sieci.       SZCZEGÓŁY - Klient nie ma wymaganych uprawnień. 
 
Error - 2014-02-12 17:10:18 | Computer Name = PAULINA-NETBOOK | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
 - Tried to start a service that wasn't the latest version of CLR Optimization service.
 Will shutdown 
 
Error - 2014-02-14 13:10:18 | Computer Name = PAULINA-NETBOOK | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
 - Tried to start a service that wasn't the latest version of CLR Optimization service.
 Will shutdown 
 
Error - 2014-02-16 05:40:23 | Computer Name = PAULINA-NETBOOK | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
 - Tried to start a service that wasn't the latest version of CLR Optimization service.
 Will shutdown 
 
Error - 2014-03-11 11:17:44 | Computer Name = PAULINA-NETBOOK | Source = Application Error | ID = 1000
Description = Aplikacja powodująca błąd wmiapsrv.exe, wersja 5.1.2600.5512, moduł
 powodujący błąd ntdll.dll, wersja 5.1.2600.6055, adres błędu 0x00019fca.
 
[ System Events ]
Error - 2014-03-06 10:44:59 | Computer Name = PAULINA-NETBOOK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Wsys Service z powodu następującego błędu:
   %%2
 
Error - 2014-03-06 10:45:41 | Computer Name = PAULINA-NETBOOK | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {7160A13D-73DA-4CEA-95B9-37356478588A}.
Błąd:
„%2”
wystąpił
 podczas uruchamiania tego polecenia:  C:\WINDOWS\system32\igfxext.exe -Embedding
 
Error - 2014-03-07 05:28:01 | Computer Name = PAULINA-NETBOOK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Wsys Service z powodu następującego błędu:
   %%2
 
Error - 2014-03-07 05:28:08 | Computer Name = PAULINA-NETBOOK | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {7160A13D-73DA-4CEA-95B9-37356478588A}.
Błąd:
„%2”
wystąpił
 podczas uruchamiania tego polecenia:  C:\WINDOWS\system32\igfxext.exe -Embedding
 
Error - 2014-03-07 07:52:53 | Computer Name = PAULINA-NETBOOK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Wsys Service z powodu następującego błędu:
   %%2
 
Error - 2014-03-07 08:02:59 | Computer Name = PAULINA-NETBOOK | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {7160A13D-73DA-4CEA-95B9-37356478588A}.
Błąd:
„%2”
wystąpił
 podczas uruchamiania tego polecenia:  C:\WINDOWS\system32\igfxext.exe -Embedding
 
Error - 2014-03-10 06:28:50 | Computer Name = PAULINA-NETBOOK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Wsys Service z powodu następującego błędu:
   %%2
 
Error - 2014-03-10 06:28:58 | Computer Name = PAULINA-NETBOOK | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {7160A13D-73DA-4CEA-95B9-37356478588A}.
Błąd:
„%2”
wystąpił
 podczas uruchamiania tego polecenia:  C:\WINDOWS\system32\igfxext.exe -Embedding
 
Error - 2014-03-11 08:34:05 | Computer Name = PAULINA-NETBOOK | Source = Service Control Manager | ID = 7000
Description = Nie można uruchomić usługi Wsys Service z powodu następującego błędu:
   %%2
 
Error - 2014-03-11 08:34:19 | Computer Name = PAULINA-NETBOOK | Source = DCOM | ID = 10000
Description = Nie można uruchomić serwera DCOM: {7160A13D-73DA-4CEA-95B9-37356478588A}.
Błąd:
„%2”
wystąpił
 podczas uruchamiania tego polecenia:  C:\WINDOWS\system32\igfxext.exe -Embedding
 
 
< End of report >