Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- OTL Extras logfile created on: 2/13/2011 4:23:20 AM - Run 1
- OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\Al Talbot\Desktop
- Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
- Internet Explorer (Version = 7.0.5730.11)
- Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy
- 254.00 Mb Total Physical Memory | 110.00 Mb Available Physical Memory | 43.00% Memory free
- 624.00 Mb Paging File | 426.00 Mb Available in Paging File | 68.00% Paging File free
- Paging file location(s): C:\pagefile.sys 0 0 [binary data]
- %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files
- Drive C: | 18.63 Gb Total Space | 7.56 Gb Free Space | 40.59% Space Free | Partition Type: FAT32
- Computer Name: DADSCOMPUTER | User Name: Al Talbot | Logged in as Administrator.
- Boot Mode: Normal | Scan Mode: Current user
- Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
- [color=#E56717]========== Extra Registry (SafeList) ==========[/color]
- [color=#E56717]========== File Associations ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
- .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
- .url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
- [color=#E56717]========== Shell Spawning ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
- batfile [open] -- "%1" %*
- cmdfile [open] -- "%1" %*
- comfile [open] -- "%1" %*
- cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
- exefile [open] -- "%1" %*
- InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
- piffile [open] -- "%1" %*
- regfile [merge] -- Reg Error: Key error.
- scrfile [config] -- "%1"
- scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
- scrfile [open] -- "%1" /S
- txtfile [edit] -- Reg Error: Key error.
- Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
- Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
- Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
- Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
- [color=#E56717]========== Security Center Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
- "FirstRunDisabled" = 1
- "AntiVirusDisableNotify" = 1
- "FirewallDisableNotify" = 1
- "UpdatesDisableNotify" = 1
- "AntiVirusOverride" = 0
- "FirewallOverride" = 0
- "UacDisableNotify" = 0
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
- "DisableMonitoring" = 1
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
- [color=#E56717]========== System Restore Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
- "DisableSR" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
- "Start" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
- "Start" = 2
- [color=#E56717]========== Firewall Settings ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
- "EnableFirewall" = 0
- "DoNotAllowExceptions" = 0
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
- "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
- "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
- "139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
- "445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
- "137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
- "138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
- "1542:TCP" = 1542:TCP:*:Enabled:Realtek WPS TCP Prot
- "1542:UDP" = 1542:UDP:*:Enabled:Realtek WPS UDP Prot
- "53:UDP" = 53:UDP:*:Enabled:Realtek AP UDP Prot
- [color=#E56717]========== Authorized Applications List ==========[/color]
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
- "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
- "C:\Program Files\LimeWire\LimeWire.exe" = C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire
- "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" = C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger
- "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" = C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger
- "C:\Program Files\Opera\opera.exe" = C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser
- "C:\Program Files\Vuze\Azureus.exe" = C:\Program Files\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze
- "C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)
- "C:\Program Files\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe" = C:\Program Files\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe:*:Enabled:RtWlan
- [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
- "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
- "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool
- "{21984000-3586-4292-87B5-7DCC7A0F04CF}" = Ashley Jones: The Heart Of Egypt
- "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 11
- "{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
- "{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
- "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
- "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
- "{45338B07-A236-4270-9A77-EBB4115517B5}" = Windows Live Sign-in Assistant
- "{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
- "{581CE7EA-A30D-0000-1211-088635773309}" = IOGEAR 802.11 b+g Utility
- "{612AD33D-9824-4E87-8396-92374E91C4BB}_is1" = Inbox Toolbar
- "{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials
- "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
- "{8C5FAD77-F678-4758-A296-C12F08D179E0}" = Microsoft IntelliPoint 6.2
- "{95120000-003F-0409-0000-0000000FF1CE}" = Microsoft Office Excel Viewer
- "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
- "{A85FD55B-891B-4314-97A5-EA96C0BD80B5}" = Windows Live Messenger
- "{AC76BA86-7AD7-1033-7B44-A90000000001}" = Adobe Reader 9
- "{AFD89880-C544-4777-B645-FBF6D3391B11}" = Belkin F7D1101 Basic Wireless USB Adapter
- "{B26AEDA3-B044-4FC0-B243-871FDAA6D2B6}" = Hex Color Finder
- "{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
- "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
- "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
- "{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
- "{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
- "{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
- "{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
- "Adobe AIR" = Adobe AIR
- "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
- "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
- "Adobe Shockwave Player" = Adobe Shockwave Player 11.5
- "Amazing Adventures Free Trial_is1" = Amazing Adventures Free Trial
- "Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.3
- "ASIO4ALL" = ASIO4ALL
- "BFGC" = Big Fish Games Client
- "CCleaner" = CCleaner
- "Christmas Train Screensaver" = Christmas Train Screensaver
- "Cradle of Rome Free Trial_is1" = Cradle of Rome Free Trial
- "Endless Online" = Endless Online 0.28
- "Foxit Reader" = Foxit Reader
- "Hawaiian Explorer Pearl Harbour Free Trial_is1" = Hawaiian Explorer Pearl Harbour Free Trial
- "Hoyle Casino '98" = Hoyle Casino '98
- "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
- "ie7" = Windows Internet Explorer 7
- "InstallShield_{AFD89880-C544-4777-B645-FBF6D3391B11}" = Belkin F7D1101 Basic Wireless USB Adapter
- "jewelquest" = Jewel Quest
- "Magic Match 1.19" = Magic Match 1.19
- "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
- "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
- "Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
- "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
- "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
- "MostFun.com Games - Ashley Jones: The Heart Of Egypt" = MostFun.com Games - Ashley Jones: The Heart Of Egypt (remove only)
- "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
- "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
- "No-IP.com DUC" = No-IP.com DUC (remove only)
- "OpenAL" = OpenAL
- "Peggle Nights Deluxe 1.0" = Peggle Nights Deluxe 1.0
- "RealArcade" = RealArcade
- "Sierra Utilities" = Sierra Utilities
- "SystemRequirementsLab" = System Requirements Lab
- "The Weather Channel Desktop 6" = The Weather Channel Desktop 6
- "uTorrent" = µTorrent
- "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
- "White Winter Clock Screensaver" = White Winter Clock Screensaver
- "WIC" = Windows Imaging Component
- "Windows Media Format Runtime" = Windows Media Format 11 runtime
- "Windows Media Player" = Windows Media Player 11
- "WinRAR archiver" = WinRAR archiver
- "WMFDist11" = Windows Media Format 11 runtime
- "wmp11" = Windows Media Player 11
- "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
- "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
- [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
- "IMVU Avatar chat client software BETA" = IMVU Avatar Chat Software
- [color=#E56717]========== Last 10 Event Log Errors ==========[/color]
- [ Application Events ]
- Error - 2/13/2011 3:49:32 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 3:49:32 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 4:05:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 4:05:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 4:05:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 4:05:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 5:31:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 5:31:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 5:31:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {7B849a69-220F-451E-B3FE-2CB811AF94AE}
- and it will not be loaded. This is most likely caused by a faulty registration.
- Error - 2/13/2011 5:31:07 AM | Computer Name = DADSCOMPUTER | Source = Userenv | ID = 1041
- Description = Windows cannot query DllName registry entry for {CF7639F3-ABA2-41DB-97F2-81E2C5DBFC5D}
- and it will not be loaded. This is most likely caused by a faulty registration.
- [ System Events ]
- Error - 2/8/2011 4:59:04 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:04 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:18 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:18 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:19 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:32 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:32 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:45 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:45 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- Error - 2/8/2011 4:59:46 AM | Computer Name = DADSCOMPUTER | Source = Srv | ID = 2000
- Description = The server's call to a system service failed unexpectedly.
- < End of report >
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement