OTL Extras logfile created on: 09/01/2014 4.28.21 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\tit angela\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 6.0.2900.5512) Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy 1014,36 Mb Total Physical Memory | 409,90 Mb Available Physical Memory | 40,41% Memory free 2,39 Gb Paging File | 1,77 Gb Available in Paging File | 74,00% Paging File free Paging file location(s): C:\pagefile.sys 1524 3048 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi Drive C: | 71,04 Gb Total Space | 55,74 Gb Free Space | 78,46% Space Free | Partition Type: NTFS Drive D: | 72,00 Gb Total Space | 71,90 Gb Free Space | 99,86% Space Free | Partition Type: NTFS Computer Name: NOME-FD7AA3C136 | User Name: tit angela | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 1 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DoNotAllowExceptions" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation) "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "C:\Programmi\Internet Explorer\IEXPLORE.EXE" = C:\Programmi\Internet Explorer\IEXPLORE.EXE:*:Enabled:Internet Explorer -- (Microsoft Corporation) "C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe" = C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger -- (Yahoo! Inc.) "C:\Programmi\Yahoo!\Messenger\YServer.exe" = C:\Programmi\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server "C:\Programmi\TeamViewer\Version7\TeamViewer.exe" = C:\Programmi\TeamViewer\Version7\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH) "C:\Programmi\TeamViewer\Version7\TeamViewer_Service.exe" = C:\Programmi\TeamViewer\Version7\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH) "C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Facebook\Video\Skype\FacebookVideoCalling.exe" = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin "C:\Programmi\AVG\AVG2014\avgmfapx.exe" = C:\Programmi\AVG\AVG2014\avgmfapx.exe:*:Enabled:Installazione di AVG [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution III "{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager "{26A24AE4-039D-4CA4-87B4-2F83217045FF}" = Java 7 Update 45 "{3248F0A8-6813-11D6-A77B-00B0D0150000}" = J2SE Runtime Environment 5.0 "{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor "{350C9410-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5CBB720F-08E6-4043-B83F-76C277AF6DE7}" = Samsung Wallpaper "{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus "{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Samsung Battery Manager "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{71A51B59-E7D3-11DB-A386-005056C00008}" = Namuga 1.3M Webcam "{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera "{84814E6B-2581-46EC-926A-823BD1C670F6}" = WIDCOMM Bluetooth Software "{8E106A57-A17E-431D-B48F-175E42EB9F74}" = imagine digital freedom - Samsung "{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}" = Visual Studio 2012 x86 Redistributables "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{ABB14904-A11B-4F42-996C-80FD608A0F17}" = Samsung EDS "{AC76BA86-7AD7-1040-7B44-A81200000003}" = Adobe Reader 8.1.2 - Italiano "{B92C5909-1D37-4C51-8397-A28BB28E5DC3}" = Facebook Video Calling 1.2.0.287 "{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide "{BD723E53-A42C-4702-AA04-1D74A0311590}" = Magic Keyboard "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F4F41D14-E0DD-4FB4-AA09-A14225C769BD}" = Atheros WLAN Client "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "AVG SafeGuard toolbar" = AVG SafeGuard toolbar "Google Chrome" = Google Chrome "HDMI" = Intel(R) Graphics Media Accelerator Driver "Imikimi Plugin" = Imikimi Plugin "InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus "InstallShield_{7B46F9CF-CF60-492E-816E-95EB1A9D1BB4}" = Play Camera "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versione 1.75.0.1300 "Marvell Miniport Driver" = Marvell Miniport Driver "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "N360" = Norton 360 "Registry Mechanic_is1" = Registry Mechanic 9.0 "SynTPDeinstKey" = Synaptics Pointing Device Driver "TeamViewer 7" = TeamViewer 7 "WinRAR archiver" = WinRAR 4.20 (32-bitowy) "Yahoo! Companion" = Yahoo! Toolbar "Yahoo! Messenger" = Yahoo! Messenger "Yahoo! Software Update" = Yahoo! Software Update [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 08/01/2014 16.38.06 | Computer Name = NOME-FD7AA3C136 | Source = Google Update | ID = 20 Description = Error - 08/01/2014 16.59.49 | Computer Name = NOME-FD7AA3C136 | Source = PerfNet | ID = 2004 Description = Impossibile aprire il servizio Server. I dati sulle prestazioni del servizio Server non verranno restituiti. Il codice di errore restituito si trova nella DWORD 0 dei dati. Error - 08/01/2014 19.47.37 | Computer Name = NOME-FD7AA3C136 | Source = Google Update | ID = 20 Description = Error - 08/01/2014 22.38.07 | Computer Name = NOME-FD7AA3C136 | Source = Google Update | ID = 20 Description = Error - 08/01/2014 23.15.49 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.exe, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. Error - 08/01/2014 23.17.41 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.exe, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. Error - 08/01/2014 23.18.13 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.exe, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. Error - 08/01/2014 23.19.08 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.exe, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. Error - 08/01/2014 23.28.01 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.com, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. Error - 08/01/2014 23.28.42 | Computer Name = NOME-FD7AA3C136 | Source = Application Hang | ID = 1002 Description = Applicazione in stallo OTL.com, versione 3.2.69.0, modulo in stallo hungapp, versione 0.0.0.0, indirizzo stallo 0x00000000. [ System Events ] Error - 08/01/2014 20.31.24 | Computer Name = NOME-FD7AA3C136 | Source = DCOM | ID = 10005 Description = DCOM ha ricevuto l'errore "%1084" durante il tentativo di avviare il servizio netman con gli argomenti "" per eseguire il server {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error - 08/01/2014 20.31.25 | Computer Name = NOME-FD7AA3C136 | Source = DCOM | ID = 10005 Description = DCOM ha ricevuto l'errore "%1084" durante il tentativo di avviare il servizio netman con gli argomenti "" per eseguire il server {BA126AE5-2166-11D1-B1D0-00805FC1270E} Error - 08/01/2014 20.31.27 | Computer Name = NOME-FD7AA3C136 | Source = DCOM | ID = 10005 Description = DCOM ha ricevuto l'errore "%1084" durante il tentativo di avviare il servizio EventSystem con gli argomenti "" per eseguire il server {1BE1F766-5536-11D1-B726-00C04FB926AF} Error - 08/01/2014 20.31.47 | Computer Name = NOME-FD7AA3C136 | Source = Service Control Manager | ID = 7001 Description = Il servizio Client DHCP dipende dal servizio NetBios su Tcpip che non è stato avviato per il seguente errore: %%31 Error - 08/01/2014 20.31.47 | Computer Name = NOME-FD7AA3C136 | Source = Service Control Manager | ID = 7001 Description = Il servizio Client DNS dipende dal servizio Driver protocollo TCP/IP che non è stato avviato per il seguente errore: %%31 Error - 08/01/2014 20.31.47 | Computer Name = NOME-FD7AA3C136 | Source = Service Control Manager | ID = 7001 Description = Il servizio Helper NetBIOS di TCP/IP dipende dal servizio AFD che non è stato avviato per il seguente errore: %%31 Error - 08/01/2014 20.31.47 | Computer Name = NOME-FD7AA3C136 | Source = Service Control Manager | ID = 7001 Description = Il servizio Servizi IPSEC dipende dal servizio Driver IPSEC che non è stato avviato per il seguente errore: %%31 Error - 08/01/2014 20.31.47 | Computer Name = NOME-FD7AA3C136 | Source = Service Control Manager | ID = 7026 Description = All'avvio non è stato possibile caricare i seguenti driver: AFD BHDrvx86 ccSet_N360 Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SRTSPX SymIRON SYMTDI Tcpip Error - 08/01/2014 20.32.16 | Computer Name = NOME-FD7AA3C136 | Source = DCOM | ID = 10005 Description = DCOM ha ricevuto l'errore "%1084" durante il tentativo di avviare il servizio StiSvc con gli argomenti "" per eseguire il server {A1F4E726-8CF1-11D1-BF92-0060081ED811} Error - 08/01/2014 20.36.44 | Computer Name = NOME-FD7AA3C136 | Source = DCOM | ID = 10005 Description = DCOM ha ricevuto l'errore "%1084" durante il tentativo di avviare il servizio EventSystem con gli argomenti "" per eseguire il server {1BE1F766-5536-11D1-B726-00C04FB926AF} < End of report >