OTL Extras logfile created on: 2014-05-06 21:06:27 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = F:\Downloads Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 2,00 Gb Total Physical Memory | 1,62 Gb Available Physical Memory | 81,28% Memory free 3,85 Gb Paging File | 3,62 Gb Available in Paging File | 94,04% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 37,30 Gb Total Space | 23,60 Gb Free Space | 63,27% Space Free | Partition Type: NTFS Drive F: | 232,88 Gb Total Space | 170,48 Gb Free Space | 73,20% Space Free | Partition Type: NTFS Computer Name: ALANWAKE-PC | User Name: cryss12 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l [HKEY_USERS\S-1-5-21-583907252-1284227242-1606980848-1003\SOFTWARE\Classes\] .html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software) "C:\Program Files\Steam\Steam.exe" = C:\Program Files\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation) "F:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe" = F:\Program Files\Capcom\Street Fighter X Tekken\SFTK.exe:*:Enabled:Street Fighter X Tekken -- (CAPCOM U.S.A, INC.) "C:\Program Files\Skype\Phone\Skype.exe" = C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "C:\Program Files\Tunngle\Tunngle.exe" = C:\Program Files\Tunngle\Tunngle.exe:*:Enabled:Tunngle beta -- (Tunngle.net GmbH) "C:\Program Files\Tunngle\TnglCtrl.exe" = C:\Program Files\Tunngle\TnglCtrl.exe:*:Enabled:TnglCtrl -- (Tunngle.net GmbH) "F:\Program Files\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe" = F:\Program Files\SteamLibrary\SteamApps\common\Counter-Strike Global Offensive\csgo.exe:*:Enabled:Counter-Strike: Global Offensive -- () "C:\Documents and Settings\cryss12\Dane aplikacji\uTorrent\uTorrent.exe" = C:\Documents and Settings\cryss12\Dane aplikacji\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR "{00C5F4F4-62F9-40D7-8000-AD8A9CD0C669}" = Microsoft Games for Windows - LIVE Redistributable "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{23170F69-40C1-2701-0920-000001000000}" = 7-Zip 9.20 "{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 51 "{31B12C11-AE4E-479F-8D6D-242DC265368D}" = HitLeap Viewer 2.8 "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3DED3A72-61A8-4B87-98A5-EF0BC8038AA0}" = DAEMON Tools "{43430FA5-AF68-4A2D-A7D4-891000008200}" = Street Fighter X Tekken "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5454083B-1308-4485-BF17-111000028701}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000028702}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000028703}" = Grand Theft Auto: Episodes from Liberty City "{5454083B-1308-4485-BF17-111000038701}" = Grand Theft Auto: Episodes from Liberty City "{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}" = Microsoft Games for Windows Marketplace "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{77DCDCE3-2DED-62F3-8154-05E745472D07}" = Acrobat.com "{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.14 "{80407BA7-7763-4395-AB98-5233F1B34E65}" = NVIDIA PhysX "{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 301.42 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 301.42 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA Oprogramowanie systemu PhysX 9.13.1220 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA Sterownik dźwięku HD 1.3.30.1 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C268B5E1-A5DA-11DF-A289-005056C00008}" = Paragon Backup & Recovery™ 2013 Free "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{DCFD26A8-60A5-4C69-A52D-264D0386FDB3}" = Microsoft Xbox 360 Accessories 1.2 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F3FCB08B-E752-444D-86A0-0634A4F3B23D}" = System Requirements Lab CYRI "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 13 Plugin "Anvi Smart Defender" = Anvi Smart Defender 1.9.3 "Battle.net" = Battle.net "CCleaner" = CCleaner "com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com "CPUID CPU-Z_is1" = CPUID CPU-Z 1.67 "Diablo III" = Diablo III "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "Flvto Youtube Downloader" = Flvto Youtube Downloader "GIMP-2_is1" = GIMP 2.8.8 "HDMI" = Intel(R) Graphics Media Accelerator Driver "Łatka polonizacyjna GTA IV v1.0" = Łatka polonizacyjna GTA IV v1.0 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Mozilla Firefox 26.0 (x86 pl)" = Mozilla Firefox 26.0 (x86 pl) "Notepad++" = Notepad++ "OCCT" = OCCT 4.4.0 "Origin" = Origin "PuTTY_is1" = PuTTY version 0.63 "screenSHU" = screenSHU - the fastest screen capture ever. "SMPlayer" = SMPlayer 0.8.6 "Steam App 730" = Counter-Strike: Global Offensive "TeamSpeak 3 Client" = TeamSpeak 3 Client "Tunngle beta_is1" = Tunngle beta "UltraISO_is1" = UltraISO Premium V9.36 "Windows Media Format Runtime" = Windows Media Format 11 runtime "WinRAR archiver" = WinRAR 5.00 (32-bitowy) "winscp3_is1" = WinSCP 5.1.7 "WMFDist11" = Windows Media Format 11 runtime [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-583907252-1284227242-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "GG" = GG "Opera 12.16.1860" = Opera 12.16 "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ System Events ] Error - 2014-05-06 04:08:50 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Skype Updater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 04:19:27 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa SecuROM User Access Service (V7) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 04:19:31 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Skype Updater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 05:15:06 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Anvi Smart Defender Realtime Guard Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 11:31:14 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa SecuROM User Access Service (V7) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 11:31:21 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Anvi Smart Defender Realtime Guard Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 11:31:25 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Skype Updater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 14:18:00 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7000 Description = Nie można uruchomić usługi Anvi Smart Defender Realtime Guard Service z powodu następującego błędu: %%3 Error - 2014-05-06 14:18:42 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa SecuROM User Access Service (V7) niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-05-06 14:18:48 | Computer Name = ALANWAKE-PC | Source = Service Control Manager | ID = 7034 Description = Usługa Skype Updater niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. < End of report >