[color=#e56717]========== Extra Registry (SafeList) ==========[/color]

Dimensione: px

Iniziare la visualizzazioe della pagina:

Download "[color=#e56717]========== Extra Registry (SafeList) ==========[/color]"

Liliana Casali
8 anni fa
Visualizzazioni

1 OTL Extras logfile created on: 09/04/ Run 1 OTL by OldTimer - Version Folder = C:\Documents and Settings\Utente\Documenti\Downloads Windows XP Professional Edition Service Pack 3 (Version = ) - Type = NTWorkstation Internet Explorer (Version = ) Locale: Country: Italia Language: ITA Date Format: dd/mm/yyyy 511,30 Mb Total Physical Memory 59,34 Mb Available Physical Memory 11,61% Memory free 1,97 Gb Paging File 1,55 Gb Available in Paging File 78,57% Paging File free Paging file location(s): C:\pagefile.sys [binary data] %SystemDrive% = C: %SystemRoot% = C:\WINDOWS %ProgramFiles% = C:\Programmi Drive C: 232,88 Gb Total Space 216,90 Gb Free Space 93,14% Space Free Partition Type: NTFS Drive Z: 465,66 Gb Total Space 419,39 Gb Free Space 90,06% Space Free Partition Type: NTFS Computer Name: DAVIDE User Name: Utente Logged in as Administrator. Boot Mode: Normal Scan Mode: All users Company Name Whitelist: Off Skip Microsoft Files: Off No Company Name Whitelist: On File Age = 60 Days [color=#e56717]========== Extra Registry (SafeList) ==========[/color] [color=#e56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>].cpl [@ = cplfile] -- rundll32.exe shell32.dll,control_rundll "%1",%*.scr [@ = Reg Error: Key error.] -- Reg Error: Key error. File not found [HKEY_USERS\S \SOFTWARE\Classes\<extens ion>].html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#e56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,control_rundll "%1",%* exefile [open] -- "%1" %* htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,installscreensaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Programmi\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Directory [PlayWithVLC] -- "C:\Programmi\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%i,%l (Microsoft Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%i,%l (Microsoft Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft [color=#e56717]========== Security Center Settings ==========[/color] Center] Pagina 1

$Available in Paging File 78,57% Paging File free Paging file location(s): C:\pagefile.$

2 "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 Extras Center\Monitoring] Center\Monitoring\AhnlabAntiVirus] Center\Monitoring\ComputerAssociatesAntiVirus] Center\Monitoring\KasperskyAntiVirus] Center\Monitoring\McAfeeAntiVirus] Center\Monitoring\McAfeeFirewall] Center\Monitoring\PandaAntiVirus] Center\Monitoring\PandaFirewall] Center\Monitoring\SophosAntiVirus] Center\Monitoring\SymantecAntiVirus] Center\Monitoring\SymantecFirewall] Center\Monitoring\TinyFirewall] Center\Monitoring\TrendAntiVirus] Center\Monitoring\TrendFirewall] Center\Monitoring\ZoneLabsFirewall] [color=#e56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#e56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] Pagina 2

$Center\Monitoring\PandaAntiVirus] Center\Monitoring\PandaFirewall] Center\Monitoring\SophosAntiVirus] Center\Monitoring\SymantecAntiVirus] Center\Monitoring\SymantecFirewall]$

3 rewallpolicy\domainprofile] Extras rewallpolicy\domainprofile\globallyopenports\list] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll, "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll, "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll, "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll, "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll, rewallpolicy\standardprofile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 rewallpolicy\standardprofile\globallyopenports\list] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll, "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll, "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll, "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll, "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll, "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll, "3389:TCP" = 3389:TCP:*:Enabled:@xpsp2res.dll, [color=#e56717]========== Authorized Applications List ==========[/color] rewallpolicy\domainprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll, (Microsoft "%windir%\network Diagnostic\xpnetdiag.exe" = %windir%\network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll, (Microsoft "C:\Programmi\Windows Live\Messenger\wlcsdk.exe" = C:\Programmi\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" = C:\Programmi\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft rewallpolicy\standardprofile\authorizedapplications\list] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll, (Microsoft "%windir%\network Diagnostic\xpnetdiag.exe" = %windir%\network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll, (Microsoft "C:\Programmi\Messenger\msmsgs.exe" = C:\Programmi\Messenger\msmsgs.exe:*:Enabled:Windows Messenger -- (Microsoft "C:\WINDOWS\system32\spool\drivers\w32x86\3\NetFaxMon.exe" = C:\WINDOWS\system32\spool\drivers\w32x86\3\NetFaxMon.exe:LocalSubNet:Enabled:Sam sung Network PC Fax Monitor -- (Samsung Electronics Co., Ltd.) "C:\Programmi\Windows Live\Messenger\wlcsdk.exe" = C:\Programmi\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" = C:\Programmi\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger -- (Microsoft "C:\WINDOWS\twain_32\Samsung\ScanMgr.exe" = C:\WINDOWS\twain_32\Samsung\ScanMgr.exe:*:Enabled:Scan Manger -- (Samsung Electronics) "C:\WINDOWS\twain_32\Samsung\SCX4623\Scan2Pc.exe" = C:\WINDOWS\twain_32\Samsung\SCX4623\Scan2Pc.exe:*:Enabled:ScanToPC -- () "C:\WINDOWS\twain_32\Samsung\SCX4623\Sscan2io.exe" = C:\WINDOWS\twain_32\Samsung\SCX4623\Sscan2io.exe:*:Enabled:SScanToIO -- () "C:\WINDOWS\system32\muzapp.exe" = C:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ Pagina 3

$dll,-22009 rewallpolicy\standardprofile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 rewallpolicy\standardprofile\globallyopenports\list] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.$

4 AOD APP player -- (Musiccity Co.Ltd.) "C:\Programmi\Skype\Phone\Skype.exe" = C:\Programmi\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.) "C:\Programmi\Ralink\Common\RaUI.exe" = C:\Programmi\Ralink\Common\RaUI.exe:*:Enabled:Ralink Utility [color=#e56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware versione [color=#e56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 16/12/ Computer Name = DAVIDE Source = Application Hang Description = Applicazione in stallo iexplore.exe, versione , modulo in stallo hungapp, versione , indirizzo stallo 0x Error - 24/12/ Computer Name = DAVIDE Source = Application Hang Description = Applicazione in stallo AcroRd32.exe, versione , modulo in stallo hungapp, versione , indirizzo stallo 0x Error - 03/01/ Computer Name = DAVIDE Source = EventSystem ID Error - 03/01/ Computer Name = DAVIDE Source = EventSystem ID Error - 07/01/ Computer Name = DAVIDE Source = EventSystem ID Error - 07/01/ Computer Name = DAVIDE Source = EventSystem ID Error - 07/01/ Computer Name = DAVIDE Source = Application Hang Description = Applicazione in stallo iexplore.exe, versione , modulo in stallo hungapp, versione , indirizzo stallo 0x Pagina 4

$exe:*:Enabled:Ralink Utility [color=#e56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Malwarebytes$

5 Error - 07/01/ Computer Name = DAVIDE Source = Application Hang Description = Applicazione in stallo iexplore.exe, versione , modulo in stallo hungapp, versione , indirizzo stallo 0x Error - 09/01/ Computer Name = DAVIDE Source = EventSystem ID Error - 09/01/ Computer Name = DAVIDE Source = EventSystem ID [ System Events ] Error - 08/04/ Computer Name = DAVIDE Source = Service Control Error - 08/04/ Computer Name = DAVIDE Source = Service Control il seguente errore: Error - 08/04/ Computer Name = DAVIDE Source = Service Control Error - 08/04/ Computer Name = DAVIDE Source = Print ID = 19 Description = Errore di condivisione della stampante Stampante: Samsung Network PC Fax. Nome condivisione: Stampante. Error - 08/04/ Computer Name = DAVIDE Source = Service Control il seguente errore: Error - 08/04/ Computer Name = DAVIDE Source = Service Control Error - 09/04/ Computer Name = DAVIDE Source = Service Control il seguente errore: Error - 09/04/ Computer Name = DAVIDE Source = Service Control Error - 09/04/ Computer Name = DAVIDE Source = Service Control il seguente errore: Pagina 5

16.23 Computer Name = DAVIDE Source = Service Control il seguente errore: Error - 08/04/2014 11.16.23 Computer Name = DAVIDE Source = Service Control Error - 08/04/2014 11.16.28 Computer Name = DAVIDE Source = Print ID = 19 Description = Errore di condivisione della stampante + 1722.

6 Error - 09/04/ Computer Name = DAVIDE Source = Service Control < End of report > Pagina 6

Documenti analoghi

Esame 70-271 : Supporting Users Running the Microsoft Windows XP Operating Systems (corso Moc 2261)

Esame 70-271 : Supporting Users Running the Microsoft Windows XP Operating Systems (corso Moc 2261) Questo corso ha lo scopo di fornire ai professionisti senza esperienza specifica di lavoro con Microsoft