Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- OTL Extras logfile created on: 20.5.2011 17:12:55 - Run 1
- OTL by OldTimer - Version 3.2.22.3 Folder = C:\Documents and Settings\Owner\Desktop
- Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
- Internet Explorer (Version = 8.0.6001.18702)
- Locale: 0000141A | Country: Bosnia and Herzegovina | Language: BSB | Date Format: d.M.yyyy
- 1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 56,00% Memory free
- 3,00 Gb Paging File | 3,00 Gb Available in Paging File | 84,00% Paging File free
- Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
- %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
- Drive C: | 29,29 Gb Total Space | 14,48 Gb Free Space | 49,45% Space Free | Partition Type: NTFS
- Drive D: | 29,29 Gb Total Space | 1,48 Gb Free Space | 5,06% Space Free | Partition Type: NTFS
- Drive E: | 45,23 Gb Total Space | 4,92 Gb Free Space | 10,87% Space Free | Partition Type: NTFS
- Drive F: | 82,49 Gb Total Space | 2,06 Gb Free Space | 2,49% Space Free | Partition Type: NTFS
- Computer Name: COMPUTER-9022 | User Name: Owner | Logged in as Administrator.
- Boot Mode: Normal | Scan Mode: Current user | Quick Scan
- Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
- [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
- [color=#E56717]========== File Associations ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
- .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
- [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
- .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
- [color=#E56717]========== Shell Spawning ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
- batfile [open] -- "%1" %*
- cmdfile [open] -- "%1" %*
- comfile [open] -- "%1" %*
- cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
- exefile [open] -- "%1" %*
- piffile [open] -- "%1" %*
- regfile [merge] -- Reg Error: Key error.
- scrfile [config] -- "%1"
- scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
- scrfile [open] -- "%1" /S
- txtfile [edit] -- Reg Error: Key error.
- Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
- Directory [ACDSee 11.0.Browse] -- "C:\Program Files\ACD Systems\ACDSee\11.0\ACDSeeQV11.exe" "%1" (ACD Systems)
- Directory [AddToPlaylistVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" ()
- Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Directory [PlayWithVLC] -- C:\Program Files\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" ()
- Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
- Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
- Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- [color=#E56717]========== Security Center Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
- [color=#E56717]========== System Restore Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
- "DisableSR" = 1
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
- "DisableSR" = 1
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
- "Start" = 4
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
- "Start" = 2
- [color=#E56717]========== Firewall Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
- "EnableFirewall" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
- "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
- "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
- "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
- "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
- "EnableFirewall" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
- "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
- "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
- "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
- "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
- "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
- "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
- [color=#E56717]========== Authorized Applications List ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
- "C:\Program Files\AVG\AVG9\avgam.exe" = C:\Program Files\AVG\AVG9\avgam.exe:*:Enabled:avgam.exe -- (AVG Technologies CZ, s.r.o.)
- "C:\Program Files\AVG\AVG9\avgdiagex.exe" = C:\Program Files\AVG\AVG9\avgdiagex.exe:*:Enabled:avgdiagex.exe -- (AVG Technologies CZ, s.r.o.)
- "C:\Program Files\AVG\AVG9\avgupd.exe" = C:\Program Files\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
- "C:\Program Files\AVG\AVG9\avgnsx.exe" = C:\Program Files\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
- "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
- "C:\Program Files\TeamViewer\Version6\TeamViewer.exe" = C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
- "C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe" = C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
- "C:\WINDOWS\Temp\~osF.tmp\rlvknlg.exe" = C:\WINDOWS\Temp\~osF.tmp\rlvknlg.exe:*:Enabled:rlvknlg.exe
- [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
- "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Alat za učitavanje Windows Live
- "{210E8562-74DA-4D97-945B-88B2ED9C8028}" = ArcSoft MediaImpression 2
- "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
- "{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 24
- "{300578F9-9EFF-4B93-9AB1-C0E5707EF463}" = ACDSee Photo Manager 2009
- "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
- "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
- "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
- "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
- "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
- "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
- "{868D7896-99D4-4513-BC62-2B3AD3E24926}" = TuneUp Utilities 2006
- "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
- "{8D166051-2C3B-4BF3-A68D-B11D45F3E1B6}" = User Profile Helper Cleanup Service
- "{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
- "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
- "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
- "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
- "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
- "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
- "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
- "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
- "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
- "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
- "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
- "{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
- "{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
- "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
- "{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
- "{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
- "{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
- "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
- "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
- "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
- "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
- "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
- "{A7050037-F0EA-4BAB-BCD5-FC05507D6147}" = Alt-Tab Task Switcher Powertoy for Windows XP
- "{AACA294F-DDB3-4DAD-9D07-02BA0AAAA734}" = Windows Live Pomocnik za prijavu
- "{AC76BA86-7AD7-1050-7B44-A94000000001}" = Adobe Reader 9.4.4 - Croatian
- "{BBA472A5-2797-4486-AE9B-70DFFE231C24}" = Windows Live Messenger
- "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
- "{C9E4932C-8417-4E4C-A0E3-EE534810AB4D}" = ClearType Tuning Control Panel Applet
- "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
- "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
- "{D43864F4-68E5-4475-AE49-70B7943AEA42}" = Windows Live Essentials
- "{D9DA5C41-964F-455F-B5E7-3664519440E8}_is1" = Bit Che
- "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
- "{F0E2B312-D7FD-4349-A9B6-E90B36DB1BD0}" = Paint.NET v3.5.5
- "7-Zip" = 7-Zip 9.19 beta
- "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
- "Adobe Shockwave Player" = Adobe Shockwave Player 11.5
- "ATI Display Driver" = ATI Display Driver
- "AVG9Uninstall" = AVG 9.0
- "CmdOpen Shell Extension" = Open Command Prompt Shell Extension (x86-32)
- "conduitEngine" = Conduit Engine
- "DBOX2 Image-Flashing-Assistent_is1" = DBOX2 Image-Flashing-Assistent 1.5.9
- "Domain Name Crawler_is1" = Domain Name Crawler
- "ENTERPRISE" = Microsoft Office Enterprise 2007
- "FileZilla Client" = FileZilla Client 3.4.0
- "Full Speed2.1" = Full Speed
- "HashCheck Shell Extension" = HashCheck Shell Extension (x86-32)
- "KLiteCodecPack_is1" = K-Lite Codec Pack 5.6.1 (Full)
- "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
- "Mozilla Firefox (3.0.19)" = Mozilla Firefox (3.0.19)
- "Nero - Burning Rom!UninstallKey" = Ahead Nero Burning ROM
- "PowerISO" = PowerISO
- "RealPlayer 6.0" = RealPlayer
- "STDU Viewer_is1" = STDU Viewer version 1.5.528.0
- "SuperCopier2" = SuperCopier2
- "TeamViewer 6" = TeamViewer 6
- "Total Video Converter 3.12_is1" = Total Video Converter 3.12 080330
- "Totalcmd" = Total Commander (Remove or Repair)
- "Unlocker" = Unlocker 1.9.0
- "uTorrent" = µTorrent
- "uTorrentBar Toolbar" = uTorrentBar Toolbar
- "VLC media player" = VLC media player 0.9.8a
- "VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
- "WinLiveSuite_Wave3" = Windows Live Essentials
- "WinRAR archiver" = WinRAR archiver
- "Your Uninstaller! 2008_is1" = Your Uninstaller! 2008 Version 6.0
- [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- [color=#E56717]========== Last 10 Event Log Errors ==========[/color]
- [ Application Events ]
- Error - 17.4.2011 17:14:26 | Computer Name = ANONYMOUS | Source = MsiInstaller | ID = 10005
- Description = Product: Windows Genuine Advantage Validation 1.9.42.0 Cracked --
- Windows Genuine Advantage Validation 1.9.42.0 Cracked requires an active Internet
- connection for installation. Please check your network configuration and proxy
- settings.
- Error - 20.4.2011 16:37:05 | Computer Name = COMPUTER-9022 | Source = Application Error | ID = 1000
- Description = Faulting application explorer.exe, version 6.0.2900.5634, faulting
- module unknown, version 0.0.0.0, fault address 0x0133ceb0.
- Error - 24.4.2011 6:40:40 | Computer Name = COMPUTER-9022 | Source = Application Error | ID = 1000
- Description = Faulting application explorer.exe, version 6.0.2900.5634, faulting
- module unknown, version 0.0.0.0, fault address 0x053fceb0.
- Error - 1.5.2011 13:30:41 | Computer Name = COMPUTER-9022 | Source = .NET Runtime Optimization Service | ID = 1103
- Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- - Tried to start a service that wasn't the latest version of CLR Optimization service.
- Will shutdown
- Error - 3.5.2011 12:47:47 | Computer Name = COMPUTER-9022 | Source = ESENT | ID = 490
- Description = svchost (1552) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
- for read / write access failed with system error 32 (0x00000020): "The process
- cannot access the file because it is being used by another process. ". The open
- file operation will fail with error -1032 (0xfffffbf8).
- Error - 3.5.2011 12:47:47 | Computer Name = COMPUTER-9022 | Source = ESENT | ID = 470
- Description = Catalog Database (1552) Database C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
- is partially attached. Attachment stage: 3. Error: -1032.
- Error - 10.5.2011 13:47:00 | Computer Name = COMPUTER-9022 | Source = ESENT | ID = 490
- Description = svchost (1748) An attempt to open the file "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb"
- for read / write access failed with system error 32 (0x00000020): "The process
- cannot access the file because it is being used by another process. ". The open
- file operation will fail with error -1032 (0xfffffbf8).
- Error - 10.5.2011 13:47:00 | Computer Name = COMPUTER-9022 | Source = ESENT | ID = 470
- Description = Catalog Database (1748) Database C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb
- is partially attached. Attachment stage: 3. Error: -1032.
- Error - 12.5.2011 17:32:48 | Computer Name = COMPUTER-9022 | Source = Application Error | ID = 1000
- Description = Faulting application explorer.exe, version 6.0.2900.5634, faulting
- module unknown, version 0.0.0.0, fault address 0x0521ceb0.
- Error - 15.5.2011 5:57:08 | Computer Name = COMPUTER-9022 | Source = Application Error | ID = 1000
- Description = Faulting application firefox.exe, version 1.8.20070.51502, faulting
- module nspr4.dll, version 4.6.7.0, fault address 0x00016cb9.
- [ System Events ]
- Error - 11.5.2011 11:08:00 | Computer Name = COMPUTER-9022 | Source = Schedule | ID = 7901
- Description = The At1.job command failed to start due to the following error: %%2147942402
- Error - 12.5.2011 11:08:00 | Computer Name = COMPUTER-9022 | Source = Schedule | ID = 7901
- Description = The At1.job command failed to start due to the following error: %%2147942402
- Error - 12.5.2011 16:21:45 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452689
- Description = Time Provider NtpClient: An error occurred during DNS lookup of the
- manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
- again in 15 minutes. The error was: A socket operation was attempted to an unreachable
- host. (0x80072751)
- Error - 12.5.2011 16:21:45 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452701
- Description = The time provider NtpClient is configured to acquire time from one
- or more time sources, however none of the sources are currently accessible. No attempt
- to contact a source will be made for 14 minutes. NtpClient has no source of accurate
- time.
- Error - 12.5.2011 16:21:48 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452689
- Description = Time Provider NtpClient: An error occurred during DNS lookup of the
- manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
- again in 15 minutes. The error was: A socket operation was attempted to an unreachable
- host. (0x80072751)
- Error - 12.5.2011 16:21:48 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452701
- Description = The time provider NtpClient is configured to acquire time from one
- or more time sources, however none of the sources are currently accessible. No attempt
- to contact a source will be made for 15 minutes. NtpClient has no source of accurate
- time.
- Error - 12.5.2011 16:22:04 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452689
- Description = Time Provider NtpClient: An error occurred during DNS lookup of the
- manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
- again in 15 minutes. The error was: A socket operation was attempted to an unreachable
- host. (0x80072751)
- Error - 12.5.2011 16:22:04 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452701
- Description = The time provider NtpClient is configured to acquire time from one
- or more time sources, however none of the sources are currently accessible. No attempt
- to contact a source will be made for 14 minutes. NtpClient has no source of accurate
- time.
- Error - 12.5.2011 16:37:04 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452689
- Description = Time Provider NtpClient: An error occurred during DNS lookup of the
- manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup
- again in 30 minutes. The error was: A socket operation was attempted to an unreachable
- host. (0x80072751)
- Error - 12.5.2011 16:37:04 | Computer Name = COMPUTER-9022 | Source = W32Time | ID = 39452701
- Description = The time provider NtpClient is configured to acquire time from one
- or more time sources, however none of the sources are currently accessible. No attempt
- to contact a source will be made for 29 minutes. NtpClient has no source of accurate
- time.
- < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement