OTL Extras logfile created on: 6/14/2012 4:51:24 PM - Run 2 OTL by OldTimer - Version 3.2.48.0 Folder = C:\Users\Dr Major\Pictures\X Work Folder Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.37 Gb Total Physical Memory | 2.02 Gb Available Physical Memory | 59.94% Memory free 6.96 Gb Paging File | 5.34 Gb Available in Paging File | 76.82% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 455.59 Gb Total Space | 10.84 Gb Free Space | 2.38% Space Free | Partition Type: NTFS Drive D: | 10.17 Gb Total Space | 1.36 Gb Free Space | 13.37% Space Free | Partition Type: NTFS Drive F: | 4.38 Gb Total Space | 1.73 Gb Free Space | 39.60% Space Free | Partition Type: UDF Drive L: | 232.88 Gb Total Space | 20.77 Gb Free Space | 8.92% Space Free | Partition Type: NTFS Drive M: | 232.83 Gb Total Space | 2.95 Gb Free Space | 1.27% Space Free | Partition Type: FAT32 Computer Name: TAZ | User Name: Dr Major | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 360 Days [color=#E56717]========== Extra Registry (All) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .bat [@ = batfile] -- "%1" %* .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cmd [@ = cmdfile] -- "%1" %* .com [@ = comfile] -- "%1" %* .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .exe [@ = exefile] -- "%1" %* .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation) .ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation) .js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) .pif [@ = piffile] -- "%1" %* .reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation) .scr [@ = scrfile] -- "%1" /S .txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) .wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" (Microsoft Corporation) regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Browse with FastStone] -- "C:\Program Files\FastStone Image Viewer\FSViewer.exe" "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 "UacDisableNotify" = 0 "InternetSettingsDisableNotify" = 0 "AutoUpdateDisableNotify" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 "VistaSp1" = Reg Error: Unknown registry data type -- File not found "VistaSp2" = Reg Error: Unknown registry data type -- File not found [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 0 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{024D01E7-7994-4AF2-8AC0-68FE10909999}" = lport=137 | protocol=17 | dir=in | app=system | "{0E15C0FE-8DE5-4D4F-B821-1A18219BD41C}" = rport=137 | protocol=17 | dir=out | app=system | "{2060E2E1-7E31-4350-AF18-5C02B00B4EAF}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | "{326E2FCB-6622-4543-B172-CF96190F998C}" = rport=80 | protocol=6 | dir=out | app=c:\program files\common files\intuit\update service\intuitupdateservice.exe | "{40761FA3-D632-4BE8-84F1-8C0893B6AAAF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{41778360-B74D-49BE-80D4-A575357DA56E}" = lport=10243 | protocol=6 | dir=in | app=system | "{4306DB4B-29E4-463C-8D61-6B308B1F9F29}" = rport=80 | protocol=6 | dir=out | app=c:\program files\common files\intuit\update service\intuitupdater.exe | "{4819EFA2-4CD8-4534-A596-E82782D363F8}" = lport=139 | protocol=6 | dir=in | app=system | "{52A8BDDD-E742-487C-A0FA-6635A1E1F4AF}" = rport=139 | protocol=6 | dir=out | app=system | "{58F9CDFB-1BC9-4023-B51B-6653A5085576}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{6E04A205-7EAF-41A1-BE08-D1D54485E0F6}" = rport=138 | protocol=17 | dir=out | app=system | "{7B31F33A-C22F-41B0-BFFF-FBD3135BDF92}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{7C3EEAEF-827A-47E4-8946-3679A3F261A3}" = rport=445 | protocol=6 | dir=out | app=system | "{9A017734-224A-47C2-8436-3D19959A310F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | "{AA3E4CDA-9DAA-43E1-AB69-E11181993A2A}" = lport=138 | protocol=17 | dir=in | app=system | "{BDEED54B-63C0-4C3E-8357-7E549B2EB7C5}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{C73B7F11-248E-4505-B7BC-83113D0A877D}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{D49E7DF6-633C-43AD-BFD7-40C4E2444C69}" = lport=49168 | protocol=6 | dir=in | name=akamai netsession interface | "{DA04A92E-FF71-46CE-A2E7-0740D135B869}" = lport=2869 | protocol=6 | dir=in | app=system | "{DB34D515-2414-4463-84FC-A9CE79347B72}" = rport=10243 | protocol=6 | dir=out | app=system | "{DEF0108F-5428-4CDF-8830-647CA23AE94C}" = lport=445 | protocol=6 | dir=in | app=system | "{EA47C3DB-02B5-43F8-8E13-0580FE0760B5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{F395E957-1BB8-4F5E-B362-00A3D59AD08B}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{F695444B-22B5-4A10-B2F7-BC7049B5DB43}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{12FFD509-0118-4DA3-9652-B177DB107020}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{141891BF-F0AA-4E9F-BF2F-29C265F13812}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{19E282BB-4384-4A10-B502-796EF03FCADA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{290B7A26-FA8B-4322-AF95-59DFF9B8940A}" = dir=in | app=c:\windows\system32\lxeacoms.exe | "{3EA6D9D6-9AC2-4015-9348-B51030F3AA83}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{40E9B29F-14CD-4814-A860-99FDFB354EC5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{47A7A724-DF15-4F9E-90A2-CB4B581D1C33}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{5052A0BB-555C-4FEC-BE17-2ACFA10B8BB4}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\devicesetup.exe | "{51F99CA9-E40A-4C2C-B734-8BBC7F6817CE}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe | "{545ED2AB-77B5-406A-BDE9-DE590F5CBD4C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{66F994CD-D631-4D2E-A87D-81251D0B3E4A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{75B380AD-9C1D-48C9-8E43-5782F7F743ED}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{78A8ECDB-0A6B-4D86-8F8D-707FDE1AAA05}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe | "{7FEFFA35-8073-4F27-9C53-92703F11AB98}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | "{8B9E14EB-3BE1-4343-B750-8037B1033030}" = protocol=17 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | "{98E997B7-8AF3-4712-AB9B-DAD5DE2AFABE}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | "{9CE5DF39-53A9-4C5B-8A1D-306403306EFA}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{B84C6B10-FA60-4417-9459-5FBAE393F610}" = protocol=6 | dir=out | app=system | "{D4AA6F9F-8B41-40A7-A46A-1E6EF6B12D80}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{DB521CED-DF35-4A8C-9B51-3D05F28DBC69}" = dir=in | app=c:\program files\itunes\itunes.exe | "{E0673F9A-405C-413C-98AF-B0ABDEB5C065}" = protocol=6 | dir=in | app=c:\program files\abbyy finereader 6.0 sprint\scan\scanman6.exe | "{E5A9180B-C141-4857-9666-57F8E18A48DA}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E79C9818-1553-4B62-81CA-5662B912CF86}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{EF7A247D-6048-4DA5-828F-665D701C1905}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{F4FF7E8F-27D6-4117-9075-AF56F19950C2}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{FC070709-9F6B-4DF7-AAFC-074F2796FD6E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{FFC572E7-BE39-4967-ADCE-E18E918675D6}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "TCP Query User{12E891D5-695A-41C3-BC75-2CA59E8682F3}C:\program files\rhapsody\rhapsody.exe" = protocol=6 | dir=in | app=c:\program files\rhapsody\rhapsody.exe | "UDP Query User{C144DCB3-C89D-4701-B688-9630BC43CD9F}C:\program files\rhapsody\rhapsody.exe" = protocol=17 | dir=in | app=c:\program files\rhapsody\rhapsody.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{004C5DA2-2051-4D25-94BA-51CF810C91EB}" = LightScribe System Software 1.12.37.1 "{0228e555-4f9c-4e35-a3ec-b109a192b4c2}" = Google Gmail Notifier "{0A2C5854-557E-48C8-835A-3B9F074BDCAA}" = Python 2.5 "{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}" = WD Diagnostics "{0E16C1BC-72A7-4DB7-BBB8-560EDCCA74B5}" = SmartSound Premiere Elements 10 Plugin "{1017A80C-6F09-4548-A84D-EDD6AC9525F0}" = Lexmark Toolbar "{10812DE7-2E57-4740-B226-6B3BE34AF9D7}" = Lexmark Tools for Office "{10A44844-4465-456E-8C97-80BDD4F68845}" = Windows Live ID Sign-in Assistant "{11D08055-939C-432b-98C3-E072478A0CD7}" = PSE10 STI Installer "{15BC8CD0-A65B-47D0-A2DD-90A824590FA8}" = Microsoft Works "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser "{1D273D91-D7D5-4036-8B84-EB4615FF5F81}" = SmartSound Sonicfire Pro 5 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite Deluxe "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{22D3A614-482C-444A-932C-9DA1B8ECDFD2}" = Elements 10 Organizer "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{254C37AA-6B72-4300-84F6-98A82419187E}" = Hewlett-Packard Active Check for Health Check "{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 26 "{28E82311-8616-11E1-BEB0-B8AC6F97B88E}" = Google Earth "{29521505-F489-4822-ADFA-32C6DEE4F114}" = TurboTax 2008 WinPerUserEducation "{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ) "{2DFF31F9-7893-4922-AF66-C9A1EB4EBB31}" = Rhapsody Player Engine "{305D4B08-5807-4475-B1C8-D54685534864}" = LightScribeTemplateLabeler "{308B6AEA-DE50-4666-996D-0FA461719D6B}" = Apple Mobile Device Support "{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver "{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1 "{353D20CC-719B-4A60-AD33-D03F88C10330}" = Microsoft Office Accounting PayPal Addin "{3881DB80-EAA2-012B-ADAE-000000000000}" = TurboTax 2009 WinPerFedFormset "{38975F50-EAA2-012B-ADB4-000000000000}" = TurboTax 2009 WinPerReleaseEngine "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3C5A81D0-EAA2-012B-AE9F-000000000000}" = TurboTax 2009 wrapper "{3F99D180-34C3-4151-8C6C-86FC5D7BDFBD}" = Hoyle Casino "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{46614A49-222A-48EF-87A9-BFD603E608E1}" = Microsoft Office Accounting Fixed Asset Manager "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies "{526B2AE8-73DF-4CE0-B140-9968677A7C93}" = HTC Sync "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{55979C41-7D6A-49CC-B591-64AC1BBE2C8B}" = HP Picasso Media Center Add-In "{5FA793A6-0071-42C1-9355-8F69A428C44F}" = Microsoft Office Accounting ADP Payroll Addin "{63D3D558-EAF4-419B-880C-208DAC13F794}" = LightScribe Template Designs - Travel Pack 1 "{669D4A35-146B-4314-89F1-1AC3D7B88367}" = Hewlett-Packard Asset Agent for Health Check "{6CCC133E-9A2F-4CAA-8866-75D029CD3AB3}" = Digital Voice Editor 3 "{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer "{6D8D64BE-F500-55B6-705D-DFD08AFE0624}" = Acrobat.com "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{7570F1CA-016D-46AC-B586-CD74645EFB52}" = TurboTax 2008 WinPerFedFormset "{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{779DECD7-E072-4B56-9B6B-BEB5973EEEB5}" = MobileMe Control Panel "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime "{81128EE8-8EAD-4DB0-85C6-17C2CE50FF71}" = Windows Live Essentials "{84B01A13-F78F-4281-9224-C96FB3530A2C}" = LightScribe Template Designs - Seasonal Pack 1 "{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}" = HP Update "{88214092-836F-4E22-A5AC-569AC9EE6A0F}" = TurboTax 2008 WinPerReleaseEngine "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C711818-076E-475C-B95B-DF11CD9D8DBE}" = Microsoft Office Accounting Equifax Addin "{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007 "{90120000-0015-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007 "{90120000-0016-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007 "{90120000-0018-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007 "{90120000-0019-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007 "{90120000-001A-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007 "{90120000-001B-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_PROR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_PROR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007 "{90120000-001F-0C0A-0000-0000000FF1CE}_PROR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system "{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}_PROR_{98333358-268C-4164-B6D4-C96DF5153727}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007 "{90120000-0117-0409-0000-0000000FF1CE}_PROR_{AAA19365-932B-49BD-8138-BE28CEE9C4B4}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components "{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007 "{91120000-0014-0000-0000-0000000FF1CE}_PROR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English) "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9C55C629-6C4F-48A9-8840-C897DF6187ED}" = HP Officejet Pro 8600 Basic Device Software "{9DBA770F-BF73-4D39-B1DF-6035D95268FC}" = HP Customer Feedback "{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support "{a9264802-8a7a-40fe-a135-5c6d204aed7a}.sdb" = Internet Explorer (Enable DEP) "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components "{AAF4DEA2-5A69-4819-9BB2-BF3D540F9024}" = Adobe Premiere Elements 10 "{AC76BA86-7AD7-1033-7B44-A92000000001}" = Adobe Reader 9.2 "{AC76BA86-7AD7-5464-3428-900000000004}" = Spelling Dictionaries Support For Adobe Reader 9 "{ACEB2BAF-96DF-48FD-ADD5-43842D4C443D}" = Adobe AIR "{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint "{AE3CF174-872C-46C6-B9F6-C0593F3BC7B8}" = Microsoft Office Live Add-in 1.4 "{B0717D5A-1976-482B-9ADF-F19631A541A4}" = Microsoft Office Accounting 2007 "{B1DB1AD8-C07E-4052-81A1-D2930232BA70}" = TurboTax 2008 wrapper "{B23726CF-68BF-41A6-A4EB-72F12F87FE05}" = TurboTax 2008 WinPerTaxSupport "{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0 "{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007 SP2 "{B6F5C6D8-C443-4B55-932F-AE11B5743FC4}" = HP Officejet Pro 8600 Help "{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data "{BE09FBC2-74BF-42A5-8FFF-12E784BAA42C}" = ESET Smart Security "{BF2115A8-1096-4C84-AA2D-B4DE3ADA2536}" = LightScribe Template Designs - Winter Whimsy "{C27C82E4-9C53-4D76-9ED3-A01A3D5EE679}" = HP Customer Experience Enhancements "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR "{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware "{CE1F2DF3-5836-4A27-A3FE-6717492DDE5E}" = PRE10STIInstaller "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CEF736FF-8133-42F3-8E18-BDFE293B87FF}" = LightScribe Template Designs - Holiday Pack 1 "{D2C5E510-BE6D-42CC-9F61-E4F939078474}" = Lexmark Printable Web "{E0810CC2-4B5B-4439-B1D0-452306AF2D64}" = HP Active Support Library "{E6D9BC25-0DBC-4368-8E4A-7DEE80661CD9}" = TurboTax 2008 WinPerProgramHelp "{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer "{E8843212-F0FC-4C3B-BFF3-D51829CB4F19}" = iTunes "{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform "{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}" = Adobe Photoshop Elements 10 "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{f32502b5-5b64-4882-bf61-77f23edcac4f}" = HP Total Care Advisor "{F3A482EC-55E0-48FA-A408-F40FDF265181}" = LightScribe Template Designs - Nature Pack 1 "{F6BD194C-4190-4D73-B1B1-C48C99921BFE}" = Windows Live Call "{F8024EB8-5B34-46FE-B15D-20ACF26FC20E}" = Hoyle Puzzle and Board Games "{F8C7F1F2-EF8A-4019-89A8-77C5667F75C7}" = LightScribe Template Designs - Animal Pack 1 "{FA3B34BE-4246-4062-90A3-34CBBEA12B72}" = HPTCSSetup "{FA54AFB1-5745-4389-B8C1-9F7509672ED1}" = iPhone Configuration Utility "{FC053571-8507-44E4-8B6D-AACEAB8CA57C}" = Sansa Media Converter "{FDDB69BB-2F9A-4830-A579-ABBB7C5AF9A8}" = muvee autoProducer 6.1 "7-Zip" = 7-Zip 9.22beta "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Photoshop Elements 10" = Adobe Photoshop Elements 10 "Advanced SystemCare 5_is1" = Advanced SystemCare 5 "Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.3 "Audit Support Center" = Audit Support Center 1.0 "Business Contact Manager" = Business Contact Manager for Outlook 2007 SP2 "CNXT_MODEM_PCI_VEN_14F1&DEV_2F20&SUBSYS_200C14F1" = Soft Data Fax Modem with SmartCP "com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com "Coupon Printer for Windows4.0" = Coupon Printer for Windows "CutePDF Writer Installation" = CutePDF Writer 2.8 "DFX for Windows Media Player" = DFX for Windows Media Player "DivX Setup" = DivX Setup "FastStone Image Viewer" = FastStone Image Viewer 4.6 "InstallShield_{1D273D91-D7D5-4036-8B84-EB4615FF5F81}" = SmartSound Sonicfire Pro 5 "InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data "InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = CyberLink PowerDirector "Lexmark S300-S400 Series" = Lexmark S300-S400 Series "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft Office Accounting 2007" = Microsoft Office Accounting 2007 "Microsoft Office Accounting Equifax Addin" = Microsoft Office Accounting Equifax Addin "Microsoft Office Accounting PayPal Addin" = Microsoft Office Accounting PayPal Addin "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "NVIDIA Drivers" = NVIDIA Drivers "PC-Doctor 5 for Windows" = Hardware Diagnostic Tools "PremElem100" = Adobe Premiere Elements 10 "PROR" = Microsoft Office Professional 2007 "Rhapsody" = Rhapsody "StartNow Toolbar" = StartNow Toolbar "TurboTax 2008" = TurboTax 2008 "TurboTax 2009" = TurboTax 2009 "TweakNow PowerPack 2011 SP2b_is1" = TweakNow PowerPack 2011 SP2b "WildTangent hp Master Uninstall" = My HP Games "WinLiveSuite_Wave3" = Windows Live Essentials "WinPcapInst" = WinPcap 4.0.2 "Wondershare YouTube Downloader_is1" = Wondershare YouTube Downloader(Build 1.3.4.20) "YTdetect" = Yahoo! Detect [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2151857577-884416560-3081426803-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Akamai" = Akamai NetSession Interface "Google Chrome" = Google Chrome "GoToMeeting" = GoToMeeting 4.0.0.320 [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 6/11/2012 1:07:21 AM | Computer Name = Taz | Source = VSS | ID = 39 Description = Error - 6/11/2012 1:07:21 AM | Computer Name = Taz | Source = VSS | ID = 8193 Description = Error - 6/12/2012 4:06:05 PM | Computer Name = Taz | Source = EventSystem | ID = 4609 Description = Error - 6/12/2012 4:06:13 PM | Computer Name = Taz | Source = EventSystem | ID = 4609 Description = Error - 6/12/2012 4:06:13 PM | Computer Name = Taz | Source = VSS | ID = 19 Description = Error - 6/12/2012 4:06:13 PM | Computer Name = Taz | Source = VSS | ID = 8193 Description = Error - 6/12/2012 4:06:17 PM | Computer Name = Taz | Source = EventSystem | ID = 4609 Description = Error - 6/12/2012 4:06:17 PM | Computer Name = Taz | Source = VSS | ID = 19 Description = Error - 6/12/2012 4:06:17 PM | Computer Name = Taz | Source = VSS | ID = 8193 Description = Error - 6/12/2012 4:18:58 PM | Computer Name = Taz | Source = EventSystem | ID = 4609 Description = [ Media Center Events ] Error - 3/19/2009 9:48:54 PM | Computer Name = Taz | Source = MCUpdate | ID = 0 Description = DownloadPackgeTask.SubTasksComplete: failed downloading package SportsSchedule. [ OSession Events ] Error - 9/14/2009 11:31:38 PM | Computer Name = Taz | Source = Microsoft Office 12 Sessions | ID = 7001 Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 12 seconds with 0 seconds of active time. This session ended with a crash. [ System Events ] Error - 6/14/2012 5:11:08 PM | Computer Name = Taz | Source = Microsoft-Windows-Eventlog | ID = 23 Description = Error - 6/14/2012 5:12:18 PM | Computer Name = Taz | Source = Service Control Manager | ID = 7009 Description = Error - 6/14/2012 5:12:48 PM | Computer Name = Taz | Source = Service Control Manager | ID = 7009 Description = Error - 6/14/2012 5:12:48 PM | Computer Name = Taz | Source = Service Control Manager | ID = 7000 Description = Error - 6/14/2012 5:13:18 PM | Computer Name = Taz | Source = Service Control Manager | ID = 7001 Description = Error - 6/14/2012 5:13:23 PM | Computer Name = Taz | Source = Service Control Manager | ID = 7024 Description = Error - 6/14/2012 5:20:30 PM | Computer Name = Taz | Source = DCOM | ID = 10016 Description = Error - 6/14/2012 5:30:30 PM | Computer Name = Taz | Source = DCOM | ID = 10016 Description = Error - 6/14/2012 5:40:30 PM | Computer Name = Taz | Source = DCOM | ID = 10016 Description = Error - 6/14/2012 5:50:30 PM | Computer Name = Taz | Source = DCOM | ID = 10016 Description = < End of report >