OTL Extras logfile created on: 2014-05-11 20:03:21 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Program Files\OTL Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17041) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 3,25 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 53,75% Memory free 6,49 Gb Paging File | 4,56 Gb Available in Paging File | 70,23% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 232,79 Gb Total Space | 171,01 Gb Free Space | 73,46% Space Free | Partition Type: NTFS Drive D: | 298,09 Gb Total Space | 39,25 Gb Free Space | 13,17% Space Free | Partition Type: NTFS Computer Name: KUBA-KOMPUTER | User Name: Kuba | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-970355542-1849783612-961316182-1001\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{15FA473B-9534-481E-A5FB-3B467913B566}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{1BF82316-895C-4C97-A887-52ADF01F2508}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{1EE660DC-A6AC-40C2-9F67-E9A1D44905B0}" = rport=137 | protocol=17 | dir=out | app=system | "{2F731BCB-BA08-4054-9DF4-524D72AE773F}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{3C74BBC9-861F-4155-8137-82949C1B44DD}" = lport=138 | protocol=17 | dir=in | app=system | "{4587C1F0-4D5C-4A7A-AFE1-D26508462A0F}" = lport=2869 | protocol=6 | dir=in | app=system | "{480BEBDC-E555-464B-A3FB-EE3E6E6587A5}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | "{543E265A-0E69-4239-A62B-6B2FCB89D828}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{644A0325-C152-43A4-BB90-BB222DB41102}" = lport=139 | protocol=6 | dir=in | app=system | "{65ED35B1-FE2A-4C1C-B7C6-11C83148A004}" = rport=10243 | protocol=6 | dir=out | app=system | "{7601B08B-C466-489F-95F8-04E26F963564}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7E073378-16EE-4F10-88CF-7CF334040652}" = lport=10243 | protocol=6 | dir=in | app=system | "{A47E1C26-4661-4A70-9751-7525FBDB4841}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{A4911861-B144-42FF-B13B-F96D11AF18C0}" = rport=445 | protocol=6 | dir=out | app=system | "{AA9F08EB-1227-4B3A-8699-BBE68999E1F2}" = rport=138 | protocol=17 | dir=out | app=system | "{AE62CD87-C7B6-437E-A95A-1D43C2406378}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{C789B22C-DED5-43E3-87C3-28F0F77CC9E9}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{DBC456EE-8610-46EA-B260-6AD622771B95}" = lport=445 | protocol=6 | dir=in | app=system | "{EACF8DFC-18AA-49CE-AD95-1334350FD654}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{EF16DA0E-B23C-4EBE-A0FF-D6B1D12D096F}" = lport=137 | protocol=17 | dir=in | app=system | "{F1F425D6-CA34-484B-B14E-2260AEBF713B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{F939AD9E-52D4-4B00-90AA-58BC7D9CBEC2}" = rport=139 | protocol=6 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02169A7A-BE76-42CE-948D-E2850FA123F9}" = protocol=6 | dir=out | app=system | "{20BC473A-C29E-4081-8F5F-7352D0614247}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{29842875-9AAE-411D-8B1F-247D1B3EDA41}" = protocol=6 | dir=in | app=c:\gry\battle.net\battle.net.exe | "{373B8B2C-B864-41D5-BDBC-16C069ABBEF8}" = protocol=6 | dir=in | app=c:\gry\steam\steamapps\common\total war rome ii\launcher\launcher.exe | "{3EF8634B-5621-4504-9DF1-A207CD5D72B3}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{45A9AD3F-D5EC-4D40-90EF-F5CA6DE6E3BA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{5216CE35-66CA-4480-9F0A-0A5AFD8E560D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{5352984A-F60F-4FE6-B8E6-B1993E5DCDB0}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{55C57FB7-5CC4-4717-A364-83261E94A723}" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | "{5A348814-95B3-4AAB-B47F-6D5E700686CA}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{619F2AF9-B4D4-47F1-96DC-F88B788EFC14}" = protocol=17 | dir=in | app=c:\gry\steam\steam.exe | "{623F5195-6F5A-4959-A5A4-3A19BBE57B0A}" = protocol=17 | dir=in | app=c:\gry\steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe | "{65117CEE-672D-4328-B037-2E45675FC638}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{68C31507-788A-420E-BDDE-22487DAE0BDF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6F4D750A-C99A-4AB9-964B-0B1A8B2255EB}" = protocol=6 | dir=in | app=c:\gry\steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe | "{712E4C4A-4F26-4E29-8627-A0435C8A03B9}" = protocol=6 | dir=in | app=c:\gry\hearthstone\hearthstone.exe | "{76946D1A-7877-4180-9DB8-6DD9BCA48DFC}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{80AB085C-8193-4F95-A13E-C97811D06B36}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | "{86BE4990-F47B-40BE-BC75-127A1341A4E2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{98C8130C-5770-4C97-A6AD-21C1C388CE6F}" = protocol=17 | dir=in | app=c:\gry\steam\steamapps\common\football manager 2013\fm.exe | "{99FC5262-51A6-454C-B2EA-0BFE07FFF3AA}" = protocol=17 | dir=in | app=c:\gry\steam\steamapps\common\total war rome ii\launcher\launcher.exe | "{9FBF82C9-4975-40C6-B054-E0CB274565C8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | "{A52AFFC1-DCCA-4CD4-891E-F7D212BBA074}" = protocol=6 | dir=in | app=c:\gry\steam\steamapps\common\football manager 2013\fm.exe | "{A785A855-ED80-441A-8AF5-DC0F568F4094}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe | "{A8AB6C68-7EBE-4363-B53F-1F0EBA7A02DF}" = protocol=6 | dir=in | app=c:\gry\steam\steam.exe | "{AE6A8485-BC55-47F0-9F85-7D49C66ADAA3}" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | "{AFCEEA3E-78DE-4D0A-8985-C169CA11DB11}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{BB50E1B6-E26A-4D30-899F-EE8C35FB40CE}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{C0B8B0D4-C45D-48D6-BCB5-D0E404F2C248}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{C4AB3E50-F850-4962-9DAD-5A61189D8483}" = protocol=17 | dir=in | app=c:\gry\battle.net\battle.net.exe | "{C5682AFC-38AC-4070-9378-6B434C31518B}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe | "{C8795675-6813-4F9F-83CF-9D0183E212E1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | "{CD3A3EB5-00CF-4E87-8480-BF9AE45E504A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{D193D636-EDD1-4304-91EA-FA5C6AF5A8D8}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | "{D75BE627-6A20-46CF-99F3-021D846EDDB2}" = protocol=17 | dir=in | app=c:\gry\hearthstone\hearthstone.exe | "{DFA26CF4-9094-4BD3-AC4A-7F00837C5749}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{F0AF8634-EFB6-4418-9079-0CB8081A6BF5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{F3BE3C76-F2BD-40CE-823C-CB5E1D0209C9}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe | "TCP Query User{5A61751B-0E6F-4786-A9BE-55C5C09FD7C6}C:\gry\wolfenstein - enemy territory\et.exe" = protocol=6 | dir=in | app=c:\gry\wolfenstein - enemy territory\et.exe | "UDP Query User{3FFA0C39-0514-484E-8459-23F405E360F3}C:\gry\wolfenstein - enemy territory\et.exe" = protocol=17 | dir=in | app=c:\gry\wolfenstein - enemy territory\et.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{26A24AE4-039D-4CA4-87B4-2F83217055FF}" = Java 7 Update 55 "{4903D172-DCCB-392F-93A3-34CA9D47FE3D}" = Microsoft .NET Framework 4.5.1 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{62B332E9-239D-4692-BDE2-0CC1CF2833DA}_is1" = Uninstall LSI "{75E9A522-65D2-4200-A95F-C3EF89703263}" = Lyrics Plugin for Winamp "{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1045" = Microsoft .NET Framework 4.5.1 (Polski) "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA Sterownik 3D Vision 335.23 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel sterowania NVIDIA 335.23 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Sterownik graficzny 335.23 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = Aktualizacje NVIDIA 10.4.0 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core "{C83B8B35-C2C4-3302-9A6E-C2AF1A59E8D6}" = Microsoft .NET Framework 4.5.1 (PLK) "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "Avast" = avast! Internet Security "Battle.net" = Battle.net "CCleaner" = CCleaner "DMX5_is1" = DriverMax 7 "Google Chrome" = Google Chrome "Hearthstone" = Hearthstone "IrfanView" = IrfanView (remove only) "KLiteCodecPack_is1" = K-Lite Codec Pack 10.4.5 Basic "LastFM_is1" = Last.fm Scrobbler 2.1.36 "Notepad++" = Notepad++ "NVIDIA Drivers" = NVIDIA Drivers "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "PunkBusterSvc" = PunkBuster Services "Steam" = Steam "Steam App 207890" = Football Manager 2013 "Steam App 214950" = Total War: ROME II "Steam App 219740" = Don't Starve "SubEdit - Vista WMP Patch_is1" = SubEdit - Vista WMP Patch "SubEdit-Player_is1" = SubEdit-Player "Winamp" = Winamp "WinRAR archiver" = WinRAR 5.01 (32-bit) "Wolfenstein - Enemy Territory" = Wolfenstein - Enemy Territory [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-04-30 09:06:47 | Computer Name = Kuba-Komputer | Source = Application Hang | ID = 1002 Description = Program Hearthstone.exe w wersji 1.0.0.5170 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: 9a4 Godzina rozpoczęcia: 01cf6474c4ab6b08 Godzina zakończenia: 54 Ścieżka aplikacji: C:\Gry\Hearthstone\Hearthstone.exe Identyfikator raportu: 429d4b5d-d068-11e3-a055-00242102fb3c Error - 2014-04-30 09:28:44 | Computer Name = Kuba-Komputer | Source = Application Hang | ID = 1002 Description = Program Hearthstone.exe w wersji 1.0.0.5170 zatrzymał interakcję z systemem Windows i został zamknięty. Aby zobaczyć, czy jest dostępnych więcej informacji dotyczących tego problemu, sprawdź historię problemu w panelu sterowania Centrum akcji. Identyfikator procesu: a9c Godzina rozpoczęcia: 01cf64751c86f05d Godzina zakończenia: 57 Ścieżka aplikacji: C:\Gry\Hearthstone\Hearthstone.exe Identyfikator raportu: fbcd32eb-d06a-11e3-a055-00242102fb3c Error - 2014-05-01 05:37:59 | Computer Name = Kuba-Komputer | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 2014-05-01 05:59:58 | Computer Name = Kuba-Komputer | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 2014-05-01 05:59:58 | Computer Name = Kuba-Komputer | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 2014-05-01 05:59:58 | Computer Name = Kuba-Komputer | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 2014-05-01 05:59:59 | Computer Name = Kuba-Komputer | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 2014-05-02 09:16:52 | Computer Name = Kuba-Komputer | Source = VSS | ID = 8194 Description = Error - 2014-05-11 12:01:46 | Computer Name = Kuba-Komputer | Source = VSS | ID = 8194 Description = Error - 2014-05-11 13:40:14 | Computer Name = Kuba-Komputer | Source = VSS | ID = 8194 Description = [ System Events ] Error - 2014-05-11 12:12:01 | Computer Name = Kuba-Komputer | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows. Error - 2014-05-11 12:26:22 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:28 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:33 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:38 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:42 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:47 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:26:52 | Computer Name = Kuba-Komputer | Source = Disk | ID = 262151 Description = W urządzeniu \Device\Harddisk0\DR0 wystąpił zły blok. Error - 2014-05-11 12:33:23 | Computer Name = Kuba-Komputer | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows. Error - 2014-05-11 13:46:16 | Computer Name = Kuba-Komputer | Source = Service Control Manager | ID = 7009 Description = Upłynął limit czasu (30000 ms) podczas oczekiwania na połączenie się z usługą Usługa raportowania błędów systemu Windows. < End of report >