OTL Extras logfile created on: 2014-09-17 09:36:38 - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\x\Moje dokumenty\Pobrane Windows XP Professional Edition Dodatek Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd 1,25 Gb Total Physical Memory | 0,25 Gb Available Physical Memory | 19,72% Memory free 2,98 Gb Paging File | 1,55 Gb Available in Paging File | 51,89% Paging File free Paging file location(s): C:\pagefile.sys 1920 3840 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 107,42 Gb Total Space | 81,78 Gb Free Space | 76,13% Space Free | Partition Type: NTFS Drive D: | 166,02 Gb Total Space | 159,05 Gb Free Space | 95,81% Space Free | Partition Type: NTFS Drive E: | 192,31 Gb Total Space | 141,17 Gb Free Space | 73,41% Space Free | Partition Type: NTFS Computer Name: X-36393E143B544 | User Name: x | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 60 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* [HKEY_USERS\S-1-5-21-1960408961-920026266-1417001333-1003\SOFTWARE\Classes\] .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htafile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Program Files\VideoLAN\VLC\vlc.exe" = C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player -- () "E:\Gry\Cs\hl.exe" = E:\Gry\Cs\hl.exe:*:Enabled:Half-Life Launcher -- (Valve) "C:\Documents and Settings\x\Moje dokumenty\Pobieranie\Counter Strike 1.6 [PL] 2013\hl.exe" = C:\Documents and Settings\x\Moje dokumenty\Pobieranie\Counter Strike 1.6 [PL] 2013\hl.exe:*:Enabled:Half-Life Launcher -- (Valve) "C:\Program Files\City Interactive\America's Secret Operations\System\Combat.exe" = C:\Program Files\City Interactive\America's Secret Operations\System\Combat.exe:*:Enabled:Combat "C:\Documents and Settings\x\Dane aplikacji\uTorrent\uTorrent.exe" = C:\Documents and Settings\x\Dane aplikacji\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent Inc.) "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0A795E81-7E99-4574-923D-8A0AF1F11CA1}" = ScanSoft PaperPort 11 "{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store "{1A383F2E-BB47-460E-ADC0-FEFBE5822680}" = Nitro Reader 3 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer "{350C9415-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{362AB21A-E2C4-40CE-81C2-8C4D62B0635A}" = Media Go "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3A08B59E-A9F0-4F4D-B7E5-6875D7F13327}" = Brother MFL-Pro Suite DCP-145C "{54215B8A-6212-8DB8-39B4-98EE2BB98BD1}" = Media Go Video Playback Engine 1.116.106.02030 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5AF71003-1797-4D93-9F37-4F2125CBF539}" = Microsoft .NET Framework 2.0 Language Pack - PLK "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{76308844-456A-4D76-99CA-511F0DED1045}" = Nero 8 "{90110415-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{B239B43B-3E99-40B0-80BF-1B1BCA868D4E}_is1" = Podatnik.info PIT pro 2013 wersja 2.0.15.26451 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser "{D89EF3B3-6F17-4665-B7A9-A4235A6DC787}" = Ghost Recon "{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio "Adobe Digital Editions 3.0" = Adobe Digital Editions 3.0 "Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin "avast!" = avast! Antivirus "CCleaner" = CCleaner "CloneCD" = CloneCD "C-Media PCI Sound" = C-Media PCI Audio Device "Colin McRae Rally 04_is1" = Colin McRae Rally 04 "D52E2FDD-4553-4F81-BE20-F1405B80CAA4" = allday savings "Driver Genius Professional Edition_is1" = Driver Genius Professional Edition "GOM Player" = GOM Player "ie8" = Windows Internet Explorer 8 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platforma Menedżera urządzeń "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware wersja 2.0.2.1012 "Microsoft .NET Framework 2.0 Language Pack - PLK" = Microsoft .NET Framework 2.0 — pakiet języka polskiego "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Mozilla Firefox 32.0.1 (x86 pl)" = Mozilla Firefox 32.0.1 (x86 pl) "MozillaMaintenanceService" = Mozilla Maintenance Service "Mp3 Knife_is1" = Mp3 Knife 3.2 "NVIDIA Drivers" = NVIDIA Drivers "PCI Audio Driver" = PCI Audio Driver "PIT Format 2012_is1" = PIT Format 2012 "PIT Format 2013_is1" = PIT Format 2013 "S4Uninst" = The Settlers IV "Stronghold_is1" = Twierdza "VLC media player" = VLC media player 1.0.3 "VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter "Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "WinRAR archiver" = WinRAR 4.00 (32-bit) "winusb0200" = Microsoft WinUsb 2.0 "WinUtilities Professinal Edition_is1" = WinUtilities Professinal Edition wersja 10.41 "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-1960408961-920026266-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "uTorrent" = µTorrent [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 2014-09-13 12:36:33 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00001c52. Error - 2014-09-13 12:36:53 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd buohsljo.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00001c52. Error - 2014-09-13 12:36:58 | Computer Name = X-36393E143B544 | Source = MsiInstaller | ID = 11309 Description = Product: Google Update Helper -- Error 1309. Error reading from file: C:\Program Files\globalUpdate\Update\1.3.25.0\Google\Update\RequiredFile.txt. System error 3. Verify that the file exists and that you can access it. Error - 2014-09-13 12:37:02 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00001c52. Error - 2014-09-13 12:38:12 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00001c52. Error - 2014-09-13 12:44:12 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00001c52. Error - 2014-09-13 12:46:23 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00002df0. Error - 2014-09-14 05:57:55 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00002df0. Error - 2014-09-14 05:59:28 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00002df0. Error - 2014-09-14 05:59:37 | Computer Name = X-36393E143B544 | Source = Application Error | ID = 1000 Description = Aplikacja powodująca błąd au_.exe, wersja 1.35.3.9, moduł powodujący błąd installerutils.dll, wersja 0.0.0.0, adres błędu 0x00002df0. [ System Events ] Error - 2014-09-16 08:01:44 | Computer Name = X-36393E143B544 | Source = Service Control Manager | ID = 7034 Description = Usługa avast! iAVS4 Control Service niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-09-16 13:38:41 | Computer Name = X-36393E143B544 | Source = NetBT | ID = 4311 Description = Zainicjowanie nie powiodło się, ponieważ nie można utworzyć urządzenia sterownika. Error - 2014-09-16 14:46:29 | Computer Name = X-36393E143B544 | Source = sr | ID = 1 Description = Filtr Przywracania systemu napotkał nieoczekiwany błąd '0xC0000001' podczas przetwarzania pliku '' w woluminie 'HarddiskVolume1'. W rezultacie zostało zatrzymane monitorowanie woluminu. Error - 2014-09-16 14:46:29 | Computer Name = X-36393E143B544 | Source = NetBT | ID = 4311 Description = Zainicjowanie nie powiodło się, ponieważ nie można utworzyć urządzenia sterownika. Error - 2014-09-16 14:47:47 | Computer Name = X-36393E143B544 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: ViaIde Error - 2014-09-16 15:14:56 | Computer Name = X-36393E143B544 | Source = Service Control Manager | ID = 7034 Description = Usługa NitroPDFReaderDriverCreatorReadSpool3 niespodziewanie zakończyła pracę. Wystąpiło to razy: 1. Error - 2014-09-17 02:16:30 | Computer Name = X-36393E143B544 | Source = sr | ID = 1 Description = Filtr Przywracania systemu napotkał nieoczekiwany błąd '0xC0000001' podczas przetwarzania pliku '' w woluminie 'HarddiskVolume1'. W rezultacie zostało zatrzymane monitorowanie woluminu. Error - 2014-09-17 02:16:30 | Computer Name = X-36393E143B544 | Source = NetBT | ID = 4311 Description = Zainicjowanie nie powiodło się, ponieważ nie można utworzyć urządzenia sterownika. Error - 2014-09-17 02:17:50 | Computer Name = X-36393E143B544 | Source = Service Control Manager | ID = 7026 Description = Nie można załadować następujących sterowników startu rozruchowego lub systemowego: ViaIde Error - 2014-09-17 03:16:01 | Computer Name = X-36393E143B544 | Source = NetBT | ID = 4311 Description = Zainicjowanie nie powiodło się, ponieważ nie można utworzyć urządzenia sterownika. < End of report >