OTL Extras logfile created on: 5/17/2010 11:04:30 PM - Run 1 OTL by OldTimer - Version 3.2.4.1 Folder = G:\Documents and Settings\Carl Bright\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 959.00 Mb Total Physical Memory | 165.00 Mb Available Physical Memory | 17.00% Memory free 2.00 Gb Paging File | 2.00 Gb Available in Paging File | 67.00% Paging File free Paging file location(s): G:\pagefile.sys 1440 2880 [binary data] %SystemDrive% = G: | %SystemRoot% = G:\WINDOWS | %ProgramFiles% = G:\Program Files Drive C: | 34.96 Gb Total Space | 23.82 Gb Free Space | 68.12% Space Free | Partition Type: NTFS Drive D: | 10.32 Gb Total Space | 3.80 Gb Free Space | 36.84% Space Free | Partition Type: FAT32 E: Drive not present or media not loaded F: Drive not present or media not loaded Drive G: | 149.04 Gb Total Space | 136.11 Gb Free Space | 91.32% Space Free | Partition Type: NTFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: CPR4000 Current User Name: Carl Bright Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: Off Skip Microsoft Files: Off File Age = 30 Days Output = Minimal [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- "G:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [print] -- "G:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation) "G:\Program Files\KODAK\KODAK Software Updater\7288971\Program\backWeb-7288971.exe" = G:\Program Files\KODAK\KODAK Software Updater\7288971\Program\backWeb-7288971.exe:*:Enabled:backWeb-7288971 -- () [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00000409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium "{0076E1AC-9E7B-4B9F-A62A-4CC9511AD8E3}" = Zune Language Pack (FR) "{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status "{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox "{10C69612-017B-45F5-B986-7D113D5A2EA3}" = MSN Toolbar "{11DB853A-6966-4724-BEAD-793C48AC8C54}" = Kodak EasyShare software "{12A76360-388E-4B27-ABEB-D5FC5378DD2A}" = HPPhotoSmartPhotobookWebPack1 "{162d74e4-7d6d-4949-8018-50e96e314696}" = C6200_Help "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService "{20B30DC1-E423-4939-B51D-05C58B0F9BBB}" = HP Photosmart All-In-One Driver Software 10.0 Rel .2 "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{212F5777-1190-4DEF-8E4D-6B2F313B45E7}" = PerfectDisk "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17 "{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java(TM) 6 Update 4 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{366FFC89-C800-4366-B903-B9C4314109A5}" = Garmin WebUpdater "{3700194C-C5DD-439A-BE06-A66960CA4C70}" = MSVCSetup "{414A373B-59DF-4102-94CA-9FE9A74CBDDA}" = Garmin Trip and Waypoint Manager v5 "{44E5B47F-870E-4E38-A458-8A5FC4DCFECF}" = ImageMixer for HDD Camcorder "{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter "{4CACFCD9-F71B-413A-8DF5-1A6419D5CDC6}" = Cards_Calendar_OrderGift_DoMorePlugout "{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate "{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2 "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{679EC478-3FF9-4987-B2FF-C2C2B27532A2}" = DocProc "{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm "{6B437F94-056F-4791-AF2C-0D10E2706AF0}" = PanoStandAlone "{6D8D64BE-F500-55B6-705D-DFD08AFE0624}" = Acrobat.com "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{787D1A33-A97B-4245-87C0-7174609A540C}" = HP Update "{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{8FF6F5CA-4E30-4E3B-B951-204CAAA2716A}" = SmartWebPrinting "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B52B30C-F65C-4244-ABCE-215E46E27AF0}" = Palm Desktop "{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp "{A07840FC-CE63-4CB8-8030-EF4B9805925A}" = HPPhotoSmartDiscLabel_PaperLabel "{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.2 "{ADFB9653-F44C-460C-BF58-189CC552DFFE}" = hpphotosmartdisclabelplugin "{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B4E91E95-A5BA-4E50-A465-DB7EFEB176E8}" = HPPhotoSmartDiscLabel_PrintOnDisc "{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply "{b9be267c-e096-4cce-a4fd-f24eec004938}" = PS_AIO_02_ProductContext "{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5 "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant "{c4549405-195f-4450-8865-6be9dc5ad136}" = PS_AIO_02_Software_Min "{C8F7C1E5-0150-11D6-A96C-00D05908F85D}" = USB Driver "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg "{cd0b9359-b716-4fd0-8e0a-09b3e312e8a4}" = PS_AIO_02_Software "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch "{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component "{DD3C88A0-C53C-41D0-A21B-6D021981D23E}" = HPPhotoSmartDiscLabelContent1 "{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware 2007 "{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01 "{EE4ACABF-531E-419A-9225-B8E0FA4955AF}" = Zune Language Pack (ES) "{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax "{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy "{F6970FBD-809A-4C51-BAB3-D94A04C6C8E7}" = Garmin Communicator Plugin "{F8D0829C-9C6F-11D3-8080-00C04FA329AA}" = Microsoft Works 6.0 "{FAF7F1D7-C0E7-47EA-8AAA-84E4F9EA3C94}" = Works Suite OS Pack "{FC18317E-BB91-4502-8909-E5AB70BC1033}" = Nero 7 Essentials "{FE54D686-ACC0-42db-A46B-987A5B6D8325}" = C6200 "{FF70513F-E3A7-402F-84FB-B7810A064BE2}" = Zune "3D Astro Blaster Demo" = 3D Astro Blaster Demo "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe SVG Viewer" = Adobe SVG Viewer 3.0 "AVG9Uninstall" = AVG 9.0 "Blast Thru" = Blast Thru "CleanUp!" = CleanUp! "Diner Dash - Flo on the Go" = Diner Dash - Flo on the Go "Generic USB Card Reader Driver" = Generic USB Card Reader Driver v2.3 "HP Imaging Device Functions" = HP Imaging Device Functions 10.0 "HP Photosmart Essential" = HP Photosmart Essential 2.5 "HP Smart Web Printing" = HP Smart Web Printing 4.60 "HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0 "HPExtendedCapabilities" = HP Customer Participation Program 10.0 "HPOCR" = OCR Software by I.R.I.S. 10.0 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "ie8" = Windows Internet Explorer 8 "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager "LimeWire" = LimeWire 4.17.4 "live-tv-software Toolbar" = live-tv-software Toolbar "Luxor" = Luxor (remove only) "Luxor AR" = Luxor Amun Rising (remove only) "Luxor Mahjong" = Luxor Mahjong (remove only) "MahJongg Master 2 Demo" = MahJongg Master 2 Demo "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Marine Sharpshooter" = Marine Sharpshooter "Marine Sharpshooter II: Jungle Warfare" = Marine Sharpshooter II: Jungle Warfare "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Nero PhotoShow Express 4" = Nero PhotoShow Express 4 "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "Plucker_is1" = Plucker 1.6 "QuickTime" = QuickTime "Shop for HP Supplies" = Shop for HP Supplies "SkyCaddieDesktop" = SkyCaddie Desktop "Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4 "SpywareBlaster_is1" = SpywareBlaster v3.5.1 "ST6UNST #1" = ScoreKeeper Version 6.5 "ST6UNST #2" = ScoreKeeper Version 6.5 (G:\Program Files\ScoreKeeper\) "ST6UNST #3" = ScoreKeeper Version 8.0 "ST6UNST #4" = ScoreKeeper Version 8.0 (G:\Program Files\ScoreKeeper\) "TomTom HOME" = TomTom HOME 2.6.2.1586 "VIA Chrome9 HC IGP Display" = VIA/S3G Display Driver 6.14.10.0054 "VIA Chrome9 HC IGP Family Display" = VIA Chrome9 HC IGP Family Display "VIA NICSET" = VIA NICSET "VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter "Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 "WIC" = Windows Imaging Component "Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinRAR archiver" = WinRAR archiver "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Works2001Setup" = Microsoft Works and Money 2001 Setup Launcher "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "Zune" = Zune [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Move Networks Player - IE" = Move Networks Media Player for Internet Explorer [color=#E56717]========== Last 10 Event Log Errors ==========[/color] [ Application Events ] Error - 5/16/2010 11:51:31 AM | Computer Name = CPR4000 | Source = MsiInstaller | ID = 11706 Description = Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue. Error - 5/16/2010 1:17:05 PM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/16/2010 3:47:27 PM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/16/2010 6:17:49 PM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/16/2010 8:48:12 PM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/16/2010 11:18:34 PM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/17/2010 12:25:50 AM | Computer Name = CPR4000 | Source = MsiInstaller | ID = 11706 Description = Product: Microsoft Office 2000 Premium -- Error 1706. No valid source could be found for product Microsoft Office 2000 Premium. The Windows installer cannot continue. Error - 5/17/2010 1:48:56 AM | Computer Name = CPR4000 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The connection with the server was terminated abnormally Error - 5/17/2010 8:32:55 PM | Computer Name = CPR4000 | Source = Application Hang | ID = 1002 Description = Hanging application _iu14D2N.tmp, version 51.49.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Error - 5/17/2010 8:34:03 PM | Computer Name = CPR4000 | Source = pctsSvc.exe | ID = 0 Description = [ System Events ] Error - 5/17/2010 8:31:09 PM | Computer Name = CPR4000 | Source = Service Control Manager | ID = 7034 Description = The PC Tools Security Service service terminated unexpectedly. It has done this 1 time(s). Error - 5/17/2010 8:36:05 PM | Computer Name = CPR4000 | Source = Service Control Manager | ID = 7000 Description = The Lexmark X73 MFP Scanner service failed to start due to the following error: %%2 Error - 5/17/2010 8:36:08 PM | Computer Name = CPR4000 | Source = Ftdisk | ID = 262189 Description = The system could not sucessfully load the crash dump driver. Error - 5/17/2010 8:36:08 PM | Computer Name = CPR4000 | Source = Ftdisk | ID = 262193 Description = Configuring the Page file for crash dump failed. Make sure there is a page file on the boot partition and that is large enough to contain all physical memory. Error - 5/17/2010 8:37:27 PM | Computer Name = CPR4000 | Source = Service Control Manager | ID = 7022 Description = The HP CUE DeviceDiscovery Service service hung on starting. Error - 5/17/2010 8:37:27 PM | Computer Name = CPR4000 | Source = Service Control Manager | ID = 7026 Description = The following boot-start or system-start driver(s) failed to load: TfFsMon TfSysMon Error - 5/17/2010 9:00:00 PM | Computer Name = CPR4000 | Source = Schedule | ID = 7901 Description = The At22.job command failed to start due to the following error: %%2147942402 Error - 5/17/2010 9:29:15 PM | Computer Name = CPR4000 | Source = Service Control Manager | ID = 7031 Description = The Windows Driver Foundation - User-mode Driver Framework service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 120000 milliseconds: Restart the service. Error - 5/17/2010 10:00:00 PM | Computer Name = CPR4000 | Source = Schedule | ID = 7901 Description = The At23.job command failed to start due to the following error: %%2147942402 Error - 5/17/2010 11:00:00 PM | Computer Name = CPR4000 | Source = Schedule | ID = 7901 Description = The At24.job command failed to start due to the following error: %%2147942402 < End of report >