API tools faq
paste
technopredator

Extras.txt

technopredator
Jul 30th, 2013
369
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.09 KB | None | 0 0
raw download clone embed print report
  1. OTL Extras logfile created on: 29/07/2013 09:05:38 p.m. - Run 1
  2. OTL by OldTimer - Version 3.2.69.0 Folder = G:\Inst\32-bit\Seguridad\Avast!\Cleaning
  3. 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
  4. Internet Explorer (Version = 8.0.7600.16385)
  5. Locale: 0000400A | Country: Bolivia | Language: ESB | Date Format: dd/MM/yyyy
  6.  
  7. 8.00 Gb Total Physical Memory | 6.87 Gb Available Physical Memory | 85.86% Memory free
  8. 23.95 Gb Paging File | 22.72 Gb Available in Paging File | 94.88% Paging File free
  9. Paging file location(s): j:\pagefile.sys 16334 16434 [binary data]
  10.  
  11. %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
  12. Drive C: | 71.20 Gb Total Space | 44.95 Gb Free Space | 63.12% Space Free | Partition Type: NTFS
  13. Drive D: | 1843.88 Gb Total Space | 976.02 Gb Free Space | 52.93% Space Free | Partition Type: NTFS
  14. Drive E: | 30.03 Gb Total Space | 3.50 Gb Free Space | 11.66% Space Free | Partition Type: NTFS
  15. Drive F: | 2.97 Gb Total Space | 2.79 Gb Free Space | 94.10% Space Free | Partition Type: NTFS
  16. Drive G: | 294.88 Gb Total Space | 46.80 Gb Free Space | 15.87% Space Free | Partition Type: NTFS
  17. Drive H: | 8.46 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
  18. Drive J: | 16.17 Gb Total Space | 0.13 Gb Free Space | 0.79% Space Free | Partition Type: NTFS
  19.  
  20. Computer Name: NEUROTRON | User Name: Usuario1 | Logged in as Administrator.
  21. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
  22. Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
  23.  
  24. [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
  25.  
  26.  
  27. [color=#E56717]========== File Associations ==========[/color]
  28.  
  29. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
  30. .html[@ = htmlfile] -- Reg Error: Key error. File not found
  31. .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
  32.  
  33. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
  34. .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
  35. .html [@ = htmlfile] -- Reg Error: Key error. File not found
  36.  
  37. [HKEY_USERS\S-1-5-21-17001800-575185625-2915215310-1000\SOFTWARE\Classes\<extension>]
  38. .html [@ = SeaMonkeyHTML] -- C:\Program Files (x86)\SeaMonkey\seamonkey.exe (mozilla.org)
  39.  
  40. [color=#E56717]========== Shell Spawning ==========[/color]
  41.  
  42. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
  43. batfile [open] -- "%1" %*
  44. cmdfile [open] -- "%1" %*
  45. comfile [open] -- "%1" %*
  46. exefile [open] -- "%1" %*
  47. helpfile [open] -- Reg Error: Key error.
  48. htmlfile [edit] -- Reg Error: Key error.
  49. htmlfile [open] -- Reg Error: Key error.
  50. htmlfile [opennew] -- Reg Error: Key error.
  51. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
  52. http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
  53. https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
  54. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
  55. InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
  56. InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
  57. piffile [open] -- "%1" %*
  58. regfile [merge] -- Reg Error: Key error.
  59. scrfile [config] -- "%1"
  60. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
  61. scrfile [open] -- "%1" /S
  62. txtfile [edit] -- Reg Error: Key error.
  63. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
  64. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
  65. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  66. Directory [mplayerc64.enqueue] -- "C:\Program Files\MPC-HC\mpc-hc64.exe" /add "%1" (MPC-HC Team)
  67. Directory [mplayerc64.play] -- "C:\Program Files\MPC-HC\mpc-hc64.exe" "%1" (MPC-HC Team)
  68. Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
  69. Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
  70. Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
  71. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  72. Folder [explore] -- Reg Error: Value error.
  73. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  74. Applications\iexplore.exe [open] -- Reg Error: Key error.
  75. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
  76.  
  77. [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
  78. batfile [open] -- "%1" %*
  79. cmdfile [open] -- "%1" %*
  80. comfile [open] -- "%1" %*
  81. cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
  82. exefile [open] -- "%1" %*
  83. helpfile [open] -- Reg Error: Key error.
  84. htmlfile [edit] -- Reg Error: Key error.
  85. htmlfile [open] -- Reg Error: Key error.
  86. htmlfile [opennew] -- Reg Error: Key error.
  87. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
  88. http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
  89. https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
  90. inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
  91. piffile [open] -- "%1" %*
  92. regfile [merge] -- Reg Error: Key error.
  93. scrfile [config] -- "%1"
  94. scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
  95. scrfile [open] -- "%1" /S
  96. txtfile [edit] -- Reg Error: Key error.
  97. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
  98. Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
  99. Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  100. Directory [mplayerc64.enqueue] -- "C:\Program Files\MPC-HC\mpc-hc64.exe" /add "%1" (MPC-HC Team)
  101. Directory [mplayerc64.play] -- "C:\Program Files\MPC-HC\mpc-hc64.exe" "%1" (MPC-HC Team)
  102. Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
  103. Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
  104. Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
  105. Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  106. Folder [explore] -- Reg Error: Value error.
  107. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
  108. Applications\iexplore.exe [open] -- Reg Error: Key error.
  109. CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
  110.  
  111. [color=#E56717]========== Security Center Settings ==========[/color]
  112.  
  113. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
  114. "cval" = 1
  115.  
  116. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
  117.  
  118. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
  119. "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
  120. "AntiVirusOverride" = 0
  121. "AntiSpywareOverride" = 0
  122. "FirewallOverride" = 0
  123.  
  124. [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
  125.  
  126. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
  127.  
  128. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
  129.  
  130. [color=#E56717]========== Firewall Settings ==========[/color]
  131.  
  132. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
  133. "DisableNotifications" = 0
  134. "EnableFirewall" = 0
  135.  
  136. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
  137. "DisableNotifications" = 0
  138. "EnableFirewall" = 0
  139.  
  140. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
  141. "DisableNotifications" = 0
  142. "EnableFirewall" = 0
  143.  
  144. [color=#E56717]========== Authorized Applications List ==========[/color]
  145.  
  146.  
  147. [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
  148.  
  149. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
  150.  
  151. [color=#E56717]========== Vista Active Application Exception List ==========[/color]
  152.  
  153. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
  154. "{015EB064-3238-42BA-9E42-1EC9D1F8EE02}" = protocol=17 | dir=in | app=c:\users\usuario1\appdata\roaming\utorrent\utorrent.exe |
  155. "{A3245D78-04C9-4A61-A261-705F3E219EBF}" = protocol=6 | dir=in | app=c:\users\usuario1\appdata\roaming\utorrent\utorrent.exe |
  156. "TCP Query User{D69A83C6-6283-4D23-B3F9-D4CB7225AE20}C:\windows\system32\mmc.exe" = protocol=6 | dir=in | app=c:\windows\system32\mmc.exe |
  157. "UDP Query User{975ED9D6-7A0A-4680-8E5C-B466AC560C58}C:\windows\system32\mmc.exe" = protocol=17 | dir=in | app=c:\windows\system32\mmc.exe |
  158.  
  159. [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
  160.  
  161. 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  162. "{1F6306D6-FB66-10D2-D474-5ADE4D57EE6B}" = AMD Fuel
  163. "{23170F69-40C1-2702-0930-000001000000}" = 7-Zip 9.30 (x64 edition)
  164. "{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1" = MPC-HC 1.6.8 (64-bit)
  165. "{3BC6E87B-7E7B-3F78-9BD1-708B199B1EB5}" = Microsoft .NET Framework 4 Extended ESN Language Pack
  166. "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
  167. "{68D2AC29-B594-466A-8D6F-238FA2135BB5}" = BOINC
  168. "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
  169. "{A0BABADE-E154-4F08-97A1-2903CD110E88}" = COMODO Firewall
  170. "{AB58402A-43DE-551C-2B40-DD1CF0E21240}" = ccc-utility64
  171. "{C3C912BB-BF4B-3788-8A19-DA5B999CE0C6}" = Microsoft .NET Framework 4 Client Profile ESN Language Pack
  172. "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
  173. "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
  174. "{FAF03106-1653-15E1-3C0C-E7AE4FAE6EBF}" = AMD Catalyst Install Manager
  175. "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
  176. "Microsoft .NET Framework 4 Client Profile ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN
  177. "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
  178. "Microsoft .NET Framework 4 Extended ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Extended ESN
  179. "Totalcmd64" = Total Commander 64-bit (Remove or Repair)
  180.  
  181. [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  182. "{0B03071A-C96E-34CA-E5A3-4D8DA8ACCB3D}" = CCC Help Polish
  183. "{1472627A-6E9F-DCB1-8894-E2BD249FD5E4}" = CCC Help Thai
  184. "{1A2C316B-F842-6FB3-3C87-6FE02861F396}" = AMD VISION Engine Control Center
  185. "{218BE476-B206-2879-B912-971E6E89E44D}" = CCC Help Finnish
  186. "{2DFFE333-1B60-4CAA-F836-3CF0C99777CA}" = CCC Help Norwegian
  187. "{364374D2-FE10-2170-2397-5B01F9D00093}" = CCC Help Spanish
  188. "{40786C7F-7078-5147-444E-D45DE808B684}" = CCC Help Portuguese
  189. "{43D3EA3E-2B72-57F3-40E0-318A614D0FDD}" = CCC Help Czech
  190. "{4F7823C4-BB28-A63E-CE08-1B463D4682DE}" = CCC Help Dutch
  191. "{6D7B8E2C-4356-619D-134F-FB36B0809958}" = CCC Help German
  192. "{6F173E00-2766-E174-C2E0-AD88F24685BD}" = CCC Help Swedish
  193. "{6FAEC41D-0654-12C1-0068-770D19FC2446}" = CCC Help Italian
  194. "{73D239CC-D6B1-ADEC-A7BE-E100C7112004}" = CCC Help Korean
  195. "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
  196. "{8D3D92F0-852F-D832-FD8B-029C8C231C13}" = CCC Help Russian
  197. "{963FFEAB-16E5-EB69-4E64-338B3D319FB4}" = CCC Help Chinese Standard
  198. "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
  199. "{9F7E9D7B-3291-96CE-A27F-DD4F6EB230EA}" = CCC Help Chinese Traditional
  200. "{A11E24AD-A7EB-78C9-F792-AD9CDDB8B651}" = Catalyst Control Center InstallProxy
  201. "{A6FDE264-C48D-36CE-CFA7-ABBEB861AC10}" = Catalyst Control Center Localization All
  202. "{B31A9284-632D-683E-3BD0-F6926D445A7B}" = CCC Help Danish
  203. "{B7A75523-3D7F-CF23-12F7-999EAF6C7167}" = CCC Help Japanese
  204. "{C821D689-95BE-0D60-255E-D9B89CB3019F}" = Catalyst Control Center Graphics Previews Common
  205. "{CE1458AA-23A7-332D-68D9-86B799898DA6}" = CCC Help Greek
  206. "{E0655E94-1D4D-8484-64C6-E6F847B7BE92}" = CCC Help Turkish
  207. "{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
  208. "{E555950B-1496-C37C-CA2C-2DF8745A5BE9}" = CCC Help English
  209. "{EE229D0E-3D9E-636C-6E75-9436A87C7E49}" = CCC Help French
  210. "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
  211. "{F536CCF1-C4C1-5FB9-6B17-F883DFFAE569}" = CCC Help Hungarian
  212. "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
  213. "avast" = avast! Free Antivirus
  214. "DAEMON Tools Lite" = DAEMON Tools Lite
  215. "IrfanView" = IrfanView (remove only)
  216. "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
  217. "QuicktimeAlt_is1" = QuickTime Alternative 3.2.2
  218. "Riot-plugin" = Riot plugin
  219. "SeaMonkey 2.20 (x86 en-US)" = SeaMonkey 2.20 (x86 en-US)
  220. "Winamp" = Winamp
  221.  
  222. [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
  223.  
  224. [HKEY_USERS\S-1-5-21-17001800-575185625-2915215310-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
  225. "SOE-PlanetSide 2" = PlanetSide 2
  226. "uTorrent" = µTorrent
  227.  
  228. < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!