zgodnie z instrukcja dolaczam zalaczniki pozdro;)
OTL Extras logfile created on: 2014-02-22 20:16:09 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = E:\
Windows Vista Home Basic Edition (Version = 6.0.6000) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6000.16982)
Locale: 00000415 | Country: Polska | Language: PLK | Date Format: yyyy-MM-dd
1013,50 Mb Total Physical Memory | 343,28 Mb Available Physical Memory | 33,87% Memory free
2,22 Gb Paging File | 1,28 Gb Available in Paging File | 57,84% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,53 Gb Total Space | 5,73 Gb Free Space | 19,40% Space Free | Partition Type: NTFS
Drive D: | 80,29 Gb Total Space | 79,20 Gb Free Space | 98,64% Space Free | Partition Type: NTFS
Drive E: | 978,98 Mb Total Space | 965,73 Mb Free Space | 98,65% Space Free | Partition Type: FAT32
Computer Name: LUBECKI | User Name: MoryCom | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
[color=#E56717]========== File Associations ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; extension & gt; ]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = OperaStable] -- Reg Error: Key error. File not found
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-2680265291-3587638504-1530426853-1000\SOFTWARE\Classes\ & lt; extension & gt; ]
.html [@ = htmlfile] -- Reg Error: Key error. File not found
[color=#E56717]========== Shell Spawning ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ & lt; key & gt; \shell\[command]\command]
batfile [open] -- " %1 " %*
cmdfile [open] -- " %1 " %*
comfile [open] -- " %1 " %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe " %1 " ,%* (Microsoft Corporation)
exefile [open] -- " %1 " %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- " C:\Program Files\Opera\launcher.exe " -noautoupdate " %1 "
https [open] -- " C:\Program Files\Opera\launcher.exe " -noautoupdate " %1 "
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe " %1 " (Microsoft Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- " %1 " %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- " %1 "
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- " %1 " /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd " %V " (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- " C:\Program Files\Winamp\winamp.exe " /BOOKMARK " %1 " (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- " C:\Program Files\Winamp\winamp.exe " /ADD " %1 " (Nullsoft, Inc.)
Directory [Winamp.Play] -- " C:\Program Files\Winamp\winamp.exe " " %1 " (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[color=#E56717]========== Security Center Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
" cval " = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
" AntiVirusOverride " = 0
" AntiSpywareOverride " = 0
" FirewallOverride " = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2680265291-3587638504-1530426853-1000]
" EnableNotifications " = 0
" EnableNotificationsRef " = 1
[color=#E56717]========== Firewall Settings ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
" DisableNotifications " = 0
" EnableFirewall " = 1
[color=#E56717]========== Authorized Applications List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
" " =
" C:\Program Files\Sierra Wireless Inc\3G Watcher\SwiApiMux.exe " = C:\Program Files\Sierra Wireless Inc\3G Watcher\SwiApiMux.exe:*:Enabled:SwiApiMux -- (Sierra Wireless, Inc.)
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {03B794ED-6FAB-469C-8DB9-BACC586026E9} " = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {07CDC840-F152-4417-9B95-37F8F0AC347F} " = lport=138 | protocol=17 | dir=in | app=system |
" {173005B8-91F3-4901-89C5-4E5EBE6B01E1} " = lport=445 | protocol=6 | dir=in | app=system |
" {27716D18-79F2-4FCF-8959-3A709664E703} " = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
" {299BED79-A0E4-44CF-949C-D82A78CB5819} " = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
" {4A11759D-AD8B-4E2A-9346-0D4949AB61E7} " = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
" {6622D9EF-1BE5-4220-96EA-475215AEA6FF} " = rport=445 | protocol=6 | dir=out | app=system |
" {8537866F-7CC0-44FF-A182-99FEC2FD2FBE} " = rport=137 | protocol=17 | dir=out | app=system |
" {8751E855-2CF4-4211-B0AA-70910BE9EE7D} " = rport=138 | protocol=17 | dir=out | app=system |
" {8FAE69C4-F1D2-4B6D-B6CC-DBA434927160} " = rport=139 | protocol=6 | dir=out | app=system |
" {AF3F2D56-A925-4A87-85AD-FEEC87C31D8A} " = lport=137 | protocol=17 | dir=in | app=system |
" {D04496F9-6C6B-4F93-84B7-8B8B8B0DEBA9} " = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
" {D6E3BCCD-09AC-44E6-9BE3-9467B369FA9A} " = lport=139 | protocol=6 | dir=in | app=system |
" {ECF816AF-1BE1-4647-AD0F-0D2F4C81DAA5} " = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
" {109F79B1-991F-42A7-A1BB-F4088953241B} " = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
" {10BB4F31-4EA0-4FD7-A6D9-3326D82C7E1E} " = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
" {158F4BC2-BE67-4F07-9280-9FA35202D0E7} " = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
" {1B4DA9F0-D36E-470B-B167-00F4E7848799} " = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
" {52290201-3A7D-44A2-B730-3C0935EBE479} " = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
" {A8978F63-057A-4CAA-8809-2DC0251A6B79} " = dir=in | app=c:\program files\skype\phone\skype.exe |
" {A92D80DB-2450-4B4E-BD5D-A99CF8DF6BC2} " = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
" {B2F1A8DC-8A33-435B-9380-AD27994CD76B} " = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
" {B93108B3-68C5-4F51-A4F8-BFECBE69EE4E} " = protocol=17 | dir=in | app=c:\users\morycom\appdata\roaming\utorrent\utorrent.exe |
" {BEBBFD2E-705D-47D5-8880-6781132DFF19} " = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
" {D308EC88-205B-4E78-816A-B1CC7166CB1A} " = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
" {E903E4D1-0171-428F-B4DD-CA9517253FC2} " = protocol=6 | dir=in | app=c:\users\morycom\appdata\roaming\utorrent\utorrent.exe |
" TCP Query User{2CA981B9-2054-4779-AE72-D11CC56F4C70}C:\program files\winamp\winamp.exe " = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
" TCP Query User{3B4E4BD1-59E4-47BB-9D8A-0520E383C536}C:\program files\opera\opera.exe " = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
" TCP Query User{3B895787-A656-4F41-AFD5-1C81CF79C262}C:\program files\sierra wireless inc\3g watcher\swiapimux.exe " = protocol=6 | dir=in | app=c:\program files\sierra wireless inc\3g watcher\swiapimux.exe |
" TCP Query User{3F44CFAB-0C13-4D04-898F-82860EA05B9C}C:\program files\winamp\winamp.exe " = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
" TCP Query User{46F6F996-EFD5-47FE-860F-AECC6541D269}C:\program files\opera\opera.exe " = protocol=6 | dir=in | app=c:\program files\opera\opera.exe |
" TCP Query User{6FEF1307-6DB3-4903-9BE7-63A7BCEE1CC9}C:\program files\3g watcher\swiapimux.exe " = protocol=6 | dir=in | app=c:\program files\3g watcher\swiapimux.exe |
" TCP Query User{AC2A5B22-2D7B-4105-B88C-136285C6F888}C:\program files\internet explorer\iexplore.exe " = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
" UDP Query User{12004B0A-1D87-4442-92FF-5C57428BD9DA}C:\program files\opera\opera.exe " = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
" UDP Query User{2AED9176-41D6-4F0B-84DB-E73C78D60ED1}C:\program files\winamp\winamp.exe " = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
" UDP Query User{344A7DEA-CF87-40B4-B7A4-5EE6FE6ECC3D}C:\program files\sierra wireless inc\3g watcher\swiapimux.exe " = protocol=17 | dir=in | app=c:\program files\sierra wireless inc\3g watcher\swiapimux.exe |
" UDP Query User{54DF151A-DEEA-4604-95EC-225326C1D4D1}C:\program files\opera\opera.exe " = protocol=17 | dir=in | app=c:\program files\opera\opera.exe |
" UDP Query User{7026D9CC-471B-49CC-AA41-F6FD50395D4F}C:\program files\3g watcher\swiapimux.exe " = protocol=17 | dir=in | app=c:\program files\3g watcher\swiapimux.exe |
" UDP Query User{7AF58586-7048-489E-B9CA-078DC2B1E36F}C:\program files\internet explorer\iexplore.exe " = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
" UDP Query User{EBD6A9A3-D1A0-4D71-B7D1-5D6D0B568B7D}C:\program files\winamp\winamp.exe " = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" {002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} " = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
" {14D08502-FEE4-40E5-90D3-8A967A1D8BA2} " = Readiris Pro 10
" {212748BB-0DA5-46DE-82A1-403736DC9F27} " = MSVC80_x86
" {26A24AE4-039D-4CA4-87B4-2F83216035FF} " = Java(TM) 6 Update 35
" {3248F0A8-6813-11D6-A77B-00B0D0160020} " = Java(TM) 6 Update 2
" {3248F0A8-6813-11D6-A77B-00B0D0160050} " = Java(TM) 6 Update 5
" {3A573687-96F9-41EA-9D57-CB631D6D50EE} " = Sierra Wireless 3G Watcher
" {4A03706F-666A-4037-7777-5F2748764D10} " = Java Auto Updater
" {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} " = Google Earth Plug-in
" {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} " = Skype™ 6.11
" {5AE3D9F1-9E9E-4015-8787-E22705AA32C5} " = msxml4
" {5CCABD37-479D-4304-B1A5-67952C25F8F2} " = Nokia Software Launcher
" {612C34C7-5E90-47D8-9B5C-0F717DD82726} " = swMSM
" {6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6} " = MSVC80_x86_v2
" {6E0352EE-6F0D-4FBC-B1B8-4FF032C78BE0} " = PC Connectivity Solution
" {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} " = Microsoft Silverlight
" {90280415-6000-11D3-8CFE-0050048383C9} " = Microsoft Office XP Professional z programem FrontPage
" {9A25302D-30C0-39D9-BD6F-21E6EC160475} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
" {9BE518E6-ECC6-35A9-88E4-87755C07200F} " = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
" {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} " = Google Update Helper
" {AC76BA86-7AD7-1033-7B44-A80000000002} " = Adobe Reader 8
" {B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 " = Spybot - Search & Destroy
" {B6CF2967-C81E-40C0-9815-C05774FEF120} " = Skype Click to Call
" {C50EF365-2898-489A-B6C7-30DAA466E9A2} " = Nokia Connectivity Cable Driver
" {D34D82E0-4600-407B-9478-8506C1DD1045} " = Nero 7 Essentials
" {D680C913-5955-469D-9D88-C1940F7506D6} " = RAW FILE CONVERTER LE
" {ECD03DA7-5952-406A-8156-5F0C93618D1F} " = USB PC Camera-168
" {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} " = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
" {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} " = Realtek High Definition Audio Driver
" 504244733D18C8F63FF584AEB290E3904E791693 " = Pakiet sterowników systemu Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
" Adobe Flash Player ActiveX " = Adobe Flash Player 12 ActiveX
" Avira AntiVir Desktop " = Avira Free Antivirus
" CCleaner " = CCleaner
" DivoCodec " = DivoCodec
" ESET Online Scanner " = ESET Online Scanner v3
" Google Chrome " = Google Chrome
" KLiteCodecPack_is1 " = K-Lite Mega Codec Pack 10.0.5
" OnlineArmor_is1 " = Online Armor 7.0
" Opera 12.16.1860 " = Opera 12.16
" RealAlt_is1 " = Real Alternative 1.8.0
" Winamp " = Winamp
" WinRAR archiver " = WinRAR 5.00 (32-bit)
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
[HKEY_USERS\S-1-5-21-2680265291-3587638504-1530426853-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
" uTorrent " = µTorrent
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
[ Application Events ]
Error - 2009-09-22 11:36:46 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-22 21:11:14 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-23 09:16:17 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-24 07:19:48 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-25 06:58:43 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-25 07:15:04 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-26 04:37:07 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-27 05:25:15 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-28 12:19:53 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 2009-09-28 12:43:17 | Computer Name = LUBECKI | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
[ System Events ]
Error - 2014-02-16 07:29:52 | Computer Name = LUBECKI | Source = Service Control Manager | ID = 7000
Description =
Error - 2014-02-16 07:30:03 | Computer Name = LUBECKI | Source = Service Control Manager | ID = 7043
Description =
Error - 2014-02-16 07:30:06 | Computer Name = LUBECKI | Source = Service Control Manager | ID = 7001
Description =
Error - 2014-02-16 07:30:08 | Computer Name = LUBECKI | Source = Service Control Manager | ID = 7000
Description =
Error - 2014-02-16 07:30:08 | Computer Name = LUBECKI | Source = DCOM | ID = 10005
Description =
Error - 2014-02-22 02:57:21 | Computer Name = LUBECKI | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =
Error - 2014-02-22 12:54:45 | Computer Name = LUBECKI | Source = Dhcp | ID = 1002
Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.1.3 dla karty
sieciowej o adresie 0018DEC861AF. (Serwer DHCP wysłał komunikat DHCPNACK).
Error - 2014-02-22 13:10:50 | Computer Name = LUBECKI | Source = Dhcp | ID = 1002
Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.1.4 dla karty
sieciowej o adresie 0018DEC861AF. (Serwer DHCP wysłał komunikat DHCPNACK).
Error - 2014-02-22 13:38:29 | Computer Name = LUBECKI | Source = Dhcp | ID = 1002
Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.1.3 dla karty
sieciowej o adresie 0018DEC861AF. (Serwer DHCP wysłał komunikat DHCPNACK).
Error - 2014-02-22 15:06:58 | Computer Name = LUBECKI | Source = Dhcp | ID = 1002
Description = Serwer DHCP 0.0.0.0 odmówił dzierżawy adresu IP 192.168.1.3 dla karty
sieciowej o adresie 0018DEC861AF. (Serwer DHCP wysłał komunikat DHCPNACK).
& lt; End of report & gt;