OTL Extras logfile created on: 27/07/2012 17:47:43 - Run 1 OTL by OldTimer - Version 3.2.55.0 Folder = C:\Documents and Settings\Mosley Family\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000809 | Country: United Kingdom | Language: ENG | Date Format: dd/MM/yyyy 3.25 Gb Total Physical Memory | 2.19 Gb Available Physical Memory | 67.47% Memory free 5.08 Gb Paging File | 3.84 Gb Available in Paging File | 75.46% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 465.76 Gb Total Space | 231.95 Gb Free Space | 49.80% Space Free | Partition Type: NTFS Drive L: | 931.28 Gb Total Space | 361.94 Gb Free Space | 38.86% Space Free | Partition Type: FAT32 Computer Name: MUESLI-677F0939 | User Name: Mosley Family | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [HKEY_USERS\S-1-5-21-507921405-448539723-839522115-1003\SOFTWARE\Classes\] .exe [@ = exefile] -- Reg Error: Key error. File not found .html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) [color=#E56717]========== Shell Spawning ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation) http [open] -- Reg Error: Key error. https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] "DisableMonitoring" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004 "445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005 "137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001 "138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Program Files\Mozilla Firefox\firefox.exe" = C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox -- (Mozilla Corporation) "C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation) "C:\Program Files\Kontiki\KService.exe" = C:\Program Files\Kontiki\KService.exe:*:Enabled:Delivery Manager Service -- (Kontiki Inc.) "C:\Program Files\MSN BackUp\MSNBackup.exe" = C:\Program Files\MSN BackUp\MSNBackup.exe:*:Enabled:MSN BackUp -- (Leonardo Bai) "C:\Program Files\Real\RealPlayer\realplay.exe" = C:\Program Files\Real\RealPlayer\realplay.exe:*:Enabled:RealPlayer -- (RealNetworks, Inc.) "C:\Program Files\TVUPlayer\TVUPlayer.exe" = C:\Program Files\TVUPlayer\TVUPlayer.exe:*:Enabled:TVUPlayer Component -- (TVU networks) "C:\Program Files\TVAnts\Tvants.exe" = C:\Program Files\TVAnts\Tvants.exe:*:Enabled:TVAnts -- (Zhejiang University) "C:\Program Files\SopCast\SopCast.exe" = C:\Program Files\SopCast\SopCast.exe:*:Enabled:SopCast Main Application -- (www.sopcast.com) "C:\Program Files\SopCast\adv\SopAdver.exe" = C:\Program Files\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver -- (www.sopcast.com) "C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe" = C:\Program Files\Microsoft Games\Flight Simulator 9\fs9.exe:*:Enabled:Microsoft Flight Simulator -- (Microsoft Corporation) "C:\WINDOWS\system32\dpnsvr.exe" = C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server -- (Microsoft Corporation) "C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.) "C:\Documents and Settings\Mosley Family\Local Settings\Application Data\Akamai\netsession_win.exe" = C:\Documents and Settings\Mosley Family\Local Settings\Application Data\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client -- (Akamai Technologies, Inc) [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00010409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Professional "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{028814FB-D05F-495E-81D7-636A87321025}" = CreativeProjectsTemplates "{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center "{069730C2-755A-485B-A205-27A1AAFA836A}" = InstantShareAlert "{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}" = Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 "{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended "{0BF5FBE7-3907-4A1F-9E48-8B66E52850D6}" = TrayApp "{0F33250B-7C59-5A14-6ED5-FCC251A962D0}" = Skins "{0F40754C-F1FD-43df-B73E-9DA38399CDD6}" = hpf_ProductContext "{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1 "{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU "{11680998-6792-4DE9-8DE1-D6D041418B26}" = SkinsHP1 "{14378007-ACD5-2482-33A1-F79289A452E7}" = Catalyst Control Center Graphics Full Existing "{14A67CE0-4F30-4607-885B-43EE27BAC746}" = Readme "{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools "{17B66E83-1BC9-11D5-A54A-0090278A1BB8}" = Microsoft FrontPage Client - English "{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1 "{1E1CB0CC-50E9-2618-5D7C-03BE0A27E118}" = Catalyst Control Center Core Implementation "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F698102-5739-441E-96F0-74F4EA540F06}" = Attansic Ethernet Utility "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live Upload Tool "{2227E1FA-01F5-483C-AB0E-2A308E900B3D}" = InterVideo FilterSDK for Hauppauge "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations "{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1 "{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 17 "{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5 "{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition "{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1 "{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types "{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) "{2D07422C-CA35-375A-A3A8-3631AB85BFE5}" = Microsoft Visual C# 2008 Express Edition - ENU "{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}" = Microsoft SQL Server Compact 3.5 Design Tools ENU "{2EA29B6A-EF86-4F7C-9F70-71A446F37F4E}" = Become A Human Body Explorer "{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update "{2FFE93F0-BB72-4E52-8761-354D1AAA9387}" = Sony Ericsson PC Suite 4.005.00 "{310BC5E2-31AF-49BB-904D-E71EB93645DC}" = AI Suite "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3 "{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5 "{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7 "{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3662AF19-6E4B-4F6D-A61C-F3CB6D67097D}" = QuickProjects "{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder "{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant "{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = JMB36X Raid Configurer "{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU "{3C216C29-D74B-4ACF-852A-82C4F3EED2F7}" = Copy "{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile "{3C759736-8347-4031-BB9C-D75ADFE6B101}" = Norton Ghost 9.0 "{3CA9D105-113C-11D8-AB3E-000102B0F79A}" = Readiris Pro 9 "{3CF78481-FB7B-4B51-99A2-D5E0CD0B3AAF}" = HPSystemDiagnostics "{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION "{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm "{457791C5-D702-4143-A7B2-2744BE9573F2}" = HP Software Update "{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012 "{474F25F5-BDC9-40E5-B1B6-F6BF23FC106F}" = Windows Live Essentials "{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4BE53DB2-C1F2-44D1-A9AB-1630BA7F2AF1}" = SolutionCenter "{4CA9EA31-65E6-00E2-3DBB-19AF01D51C8D}" = Catalyst Control Center Graphics Light "{4E05249B-CC02-40E7-85B6-29627BFE9454}" = Scan "{4E1D975D-9BF3-43CF-AA30-7186CEE3D9DE}" = STOPzilla "{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects "{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP v3.081 "{52809086-618D-4F0B-8BF1-B75A5BB817A4}" = Sony Ericsson PC Suite "{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English) "{587178E7-B1DF-494E-9838-FA4DD36E873C}" = ASUSUpdate "{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}" = Microsoft Visual C# 2010 Express - ENU "{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth "{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard "{5EF19AD3-1873-9072-D526-E8F4E6A9EE59}" = Catalyst Control Center Graphics Full New "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{686695ED-BB3F-415D-B0DB-18CF535F7B50}" = Driver Manager "{68C83D63-C661-C444-7E60-E0328D842ECB}" = ccc-core-preinstall "{696C94BC-44BC-4B8E-ABAA-6FFC0F11A6D3}" = PhotoGallery "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6A3F9D74-BB80-4451-8CA1-4B3A857F1359}" = Apple Application Support "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0 "{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{72D07FDD-94B7-A4EE-8C28-888C55D33831}" = ccc-core-static "{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client "{76E41F43-59D2-4F30-BA42-9A762EE1E8DE}" = Avanquest update "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{78B55A60-5E51-11D4-A766-00C00C02EDEF}" = Nancy Drew: Message in a Haunted Mansion "{7ADE9F27-A175-447F-A4B4-B05FA82735E1}" = HP Deskjet 6900 series "{7CFD1028-F6C9-4b3c-BD20-51D56E7C7C8D}" = HP Scanjet 3770 "{7FFC95A3-A514-E94D-72A1-B0FF80656519}" = CCC Help English "{822A8730-86A7-4CAA-BDE1-7337169BFF2B}" = Sound Blaster X-Fi Xtreme Audio "{827ECAB7-3F8E-4A66-A663-67A8F678536C}" = CreativeProjects "{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status "{842FAF7C-50EF-4463-9B8F-6222E1384D7D}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86) "{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}" = VIMICRO USB PC Camera V "{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules "{9422C8EA-B0C6-4197-B8FC-DC797658CA00}" = Windows Live Sign-in Assistant "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{97FA9DC8-B4AF-84EE-DA97-B13FE28381BA}" = ccc-utility "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C2DC81B-8114-37D9-A922-95E460A1FAFB}" = Microsoft Visual Basic 2008 Express Edition - ENU "{A1BF9950-8CDB-468E-83FA-EACFB00EA7D5}" = Windows Live Sync "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A2273570-B532-4F8D-892E-14999C591E25}" = Kruptos 2 "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection "{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AAA11090-6E99-4655-AAF5-57EB5F677D0C}" = MarketResearch "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.3) "{ACEB2BAF-96DF-48FD-ADD5-43842D4C443D}" = Adobe AIR "{ADE16A9D-FBDC-4ECC-B6BD-9C31E51D0305}" = USB PC Camera VC305 "{B1C2398C-6FAB-46D1-806C-5942F0829994}" = ParetoLogic Data Recovery "{B32C75F2-7495-4D01-9431-C11E97D66F8C}" = DocProc "{B3A77A42-DCF7-4830-AE0E-8CEE34A76200}" = CueTour "{B4089055-D468-45A4-A6BA-5A138DD715FC}" = Bing Bar "{B43357AA-3A6D-4D94-B56E-43C44D09E548}" = Microsoft .NET Framework (English) "{B4BF87C8-3EEC-4774-82A2-584F109187B1}" = Genesys USB Mass Storage Device "{B4C0A315-07FB-39F9-85CD-8CE20C019350}" = Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework "{B4CDFECB-0A6F-45D6-BE36-B3DCB8367076}" = Dovada Calculator "{B4FEA924-630D-11D4-B78E-005004566E4D}" = ViewSonic Monitor Drivers "{B57EAFF2-D6EE-4C6C-9175-ED9F17BFC1BC}" = Windows Live Messenger "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer "{BCB002B8-493D-4C3F-A968-774FC0881033}" = Nero 7 Essentials "{BCC992E5-5C81-4066-9B55-03DC10B24D21}" = InstantShare "{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86) "{BDFE199D-E889-4BB6-BECB-C4BDF5700849}" = Documents To Go "{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5 "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C3502B86-FAC7-43AA-82D8-AB30EC51596A}" = PrintScreen "{C5DA59CF-2BB8-48D5-8E5B-17F2E0F0FEE4}" = System Requirements Lab for Intel "{C9A87D86-FDFD-418B-BF96-EF09320973B3}" = PC Inspector smart recovery "{CAF76A13-FA1A-4659-95CB-6F8FDE6BA030}" = hpg3770 "{CB1F3886-AE9F-46fb-8325-6B0718989285}" = dj_taplugin "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack "{D1846BA1-6118-3EDF-8C57-6E1A04646738}" = Microsoft Visual C++ 2008 Express Edition - ENU "{D186329B-1B4D-408D-ABEC-EA5CE1F182C9}" = Overland "{D3161124-2B4D-478F-901A-D21BCAD72C7E}" = Addit "{D466F3D9-510C-4729-B7D4-2E70490E4CDF}" = BBC iPlayer Download Manager "{D4D24FE5-FAB3-4FE2-AFFC-623955F4DF3A}" = Visual Studio.NET Baseline - English "{D7CAE58E-26DE-49B7-A75D-EAEDF76726BE}" = HP Photosmart Essential "{DE3283DF-2228-4E95-90B0-3F8B37C524AB}" = Guillemot Force Feedback Joystick Drivers "{DEBB2986-15B0-4D28-95FA-5C966A396589}" = HPProductAssistant "{DF38F332-2AC3-37FF-9FDC-8C4C80E531FB}" = MSDN Library for Microsoft Visual Studio 2008 Express Editions "{DFC6573E-124D-4026-BFA4-B433C9D3FF21}" = ISO Recorder "{E6158D07-2637-4ECF-B576-37C489669174}" = Windows Live Call "{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer "{EC2715CE-C182-483C-84CC-81D7D914CF14}" = WebReg "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{EED1EFD7-2703-4f7e-9820-EAA3C4723EA3}" = Watchtower Library 2011 - English "{EEE76149-DC7F-4D3E-B021-6152DF574FA6}" = Pippa Funnell - Secrets of the Ranch "{EF5A6DD8-4A03-4BDD-A7C3-5CA2FF02DCFA}" = Pippa Funnell "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F43120F7-7DBF-4E10-BC9B-19373989AAFF}_is1" = Windows Password Unlocker Standard Demo 5.0.0.0 "{F44DA61E-720D-4E79-871F-F6E628B33242}" = OpenOffice.org 3.0 "{F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4}" = ubCore "{F73920B1-FD39-6893-4E9B-748311B666AF}" = Catalyst Control Center Graphics Previews Common "{FF8157AA-F640-45BD-B7C2-BAA1016B267A}" = palmOne "7-Zip" = 7-Zip 4.44 beta "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0 "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "All ATI Software" = ATI - Software Uninstall Utility "AtcL1" = Attansic L1 Gigabit Ethernet Driver "Audacity_is1" = Audacity 1.2.6 "AudioCS" = Creative Audio Console "BBC iPlayer Download Manager" = BBC iPlayer Download Manager "Creative Software AutoUpdate" = Creative Software AutoUpdate "DataRecov" = Sondle Data Recovery Assist "Deep Space 3D Screensaver_is1" = Deep Space 3D Screensaver 1.0 "Earth 3D Screensaver_is1" = Earth 3D Screensaver 1.0 "ExpressRip" = Express Rip "FileHippo.com" = FileHippo.com Update Checker "Flight Simulator 9.0" = Microsoft Flight Simulator 2004 A Century of Flight "FPAdjust" = FPAdjust "Gmail Password Recovery" = Gmail Password Recovery (remove only) "Google Chrome" = Google Chrome "Hauppauge WinTV" = Hauppauge WinTV "Hauppauge WinTV 7" = Hauppauge WinTV 7 "Hauppauge WinTV DVB-T EPG Service" = Hauppauge WinTV DVB-T EPG Service "Hauppauge WinTV Infrared Remote" = Hauppauge WinTV Infrared Remote "Hauppauge WinTV Radio" = Hauppauge WinTV Radio "Hauppauge WinTV Scheduler" = Hauppauge WinTV Scheduler "Hauppauge WinTV Soft PVR" = Hauppauge WinTV Soft PVR "HP Imaging Device Functions" = HP Imaging Device Functions 6.0 "HP Photo & Imaging" = HP Image Zone 4.0 "HP Solution Center & Imaging Support Tools" = HP Solution Center and Imaging Support Tools 6.0 "HPExtendedCapabilities" = HP Extended Capabilities 6.0 "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie7" = Windows Internet Explorer 7 "ie8" = Windows Internet Explorer 8 "InstallShield_{F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4}" = ubCore "InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012 "Key Stage 3 Science" = Key Stage 3 Science "KS3PhysicsDemo_1.0_is1" = Focus on KS3 Physics (demo) "Lagoon 3D Screensaver_is1" = Lagoon 3D Screensaver 1.0 "Life A-Level Mathematics" = Life A-Level Mathematics "LiveUpdate" = LiveUpdate 2.0 (Symantec Corporation) "Magic ISO Maker v5.5 (build 0261)" = Magic ISO Maker v5.5 (build 0261) "MagicDisc 2.7.97" = MagicDisc 2.7.97 "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.62.0.1300 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft .NET Framework Full v1.0.3705 (1033)" = Microsoft .NET Framework (English) v1.0.3705 "Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0 "Microsoft SQL Server 2005" = Microsoft SQL Server 2005 "Microsoft Visual Basic 2008 Express Edition - ENU" = Microsoft Visual Basic 2008 Express Edition - ENU "Microsoft Visual C# 2008 Express Edition - ENU" = Microsoft Visual C# 2008 Express Edition - ENU "Microsoft Visual C# 2010 Express - ENU" = Microsoft Visual C# 2010 Express - ENU "Microsoft Visual C++ 2008 Express Edition - ENU" = Microsoft Visual C++ 2008 Express Edition - ENU "Mozilla Firefox 9.0.1 (x86 en-US)" = Mozilla Firefox 9.0.1 (x86 en-US) "Mozilla Thunderbird 14.0 (x86 en-GB)" = Mozilla Thunderbird 14.0 (x86 en-GB) "MP3 Disc Burner_is1" = MP3 Disc Burner 1.85 "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "MSDN Library for Microsoft Visual Studio 2008 Express Editions" = MSDN Library for Microsoft Visual Studio 2008 Express Editions "MSN BackUp" = MSN BackUp 1.3.2 "MSNINST" = MSN "Myst Masterpiece Edition" = Myst Masterpiece Edition "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "PC Alarm Clock" = PC Alarm Clock "PDFlite" = PDFlite 0.6 "Perfect Alarm Clock" = Perfect Alarm Clock "Pippa Funnell 3" = Pippa Funnell 3 "ProjectX_0" = ProjectX 0.90.4.00 "QuickTime" = QuickTime "RealPlayer 15.0" = RealPlayer "Redirection Port Monitor" = RedMon - Redirection Port Monitor "SopCast" = SopCast 3.0.3 "SoundTap" = SoundTap Streaming Audio Recorder "Stellar Phoenix Mail Recovery_is1" = Stellar Phoenix Mail Recovery "Switch" = Switch Sound File Converter "TMSExplorer" = TMS Explorer "TomTom HOME" = TomTom HOME 2.8.1.2218 "ToolBox" = NCH Toolbox "TVAnts 1.0" = TVAnts 1.0 "TVUPlayer" = TVUPlayer 2.4.1.0 "Uru - Ages Beyond Myst" = Uru - Ages Beyond Myst "USB-706 Vibration Joystick" = USB-706 Vibration Joystick "VLC media player" = VideoLAN VLC media player 0.8.6c "Voyage of Columbus 3D Screensaver_is1" = Voyage of Columbus 3D Screensaver 1.0 "VST Bridge_is1" = VST Bridge 1.1 "VTPlus32 for WinTV (English)" = VTPlus32 for WinTV (English) "WIC" = Windows Imaging Component "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows Password Recovery Tool 3.0" = Windows Password Recovery Tool 3.0 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinLiveSuite_Wave3" = Windows Live Essentials "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-507921405-448539723-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "7bec2f28b4901877" = satellitetvcube "Akamai" = Akamai NetSession Interface [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 25/05/2019 17:02:34 | Computer Name = MUESLI-677F0939 | Source = Norton Ghost 9.0 | ID = 100 Description = Description: Unable to successfully reconcile changes since last session. Unable to enumerate the current drives on this system. Cannot initialize the Storage Management Engine. Details: Unspecified error Source: Norton Ghost 9.0 Error - 25/05/2019 17:02:39 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131083 Description = Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Error - 25/05/2019 17:02:43 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: This operation returned because the timeout period expired. Error - 25/05/2019 17:02:44 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131083 Description = Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Error - 25/05/2019 17:02:44 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error - 25/05/2019 17:02:44 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131083 Description = Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. Error - 25/05/2019 17:02:44 | Computer Name = MUESLI-677F0939 | Source = crypt32 | ID = 131080 Description = Failed auto update retrieval of third-party root list sequence number from: with error: The specified server cannot perform the requested operation. Error - 25/05/2019 17:02:58 | Computer Name = MUESLI-677F0939 | Source = Norton Ghost 9.0 | ID = 100 Description = Description: Unable to successfully reconcile changes since last session. Unable to enumerate the current drives on this system. Cannot initialize the Storage Management Engine. Details: Unspecified error Source: Norton Ghost 9.0 Error - 25/05/2019 17:03:23 | Computer Name = MUESLI-677F0939 | Source = Norton Ghost 9.0 | ID = 100 Description = Description: Unable to successfully reconcile changes since last session. Unable to enumerate the current drives on this system. Cannot initialize the Storage Management Engine. Details: Unspecified error Source: Norton Ghost 9.0 Error - 25/05/2019 17:03:46 | Computer Name = MUESLI-677F0939 | Source = Norton Ghost 9.0 | ID = 100 Description = Description: Unable to successfully reconcile changes since last session. Unable to enumerate the current drives on this system. Cannot initialize the Storage Management Engine. Details: Unspecified error Source: Norton Ghost 9.0 [ System Events ] Error - 25/02/2012 12:01:50 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/02/2012 13:13:54 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/02/2012 14:13:57 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/02/2012 15:25:54 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/02/2012 16:26:05 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/02/2012 17:26:08 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 26/02/2012 15:49:13 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 26/02/2012 17:24:23 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 08/03/2012 10:44:42 | Computer Name = MUESLI-677F0939 | Source = MRxSmb | ID = 8003 Description = The master browser has received a server announcement from the computer ELEANOR-PC that believes that it is the master browser for the domain on transport NetBT_Tcpip_{E725B942-BB4D-4B5. The master browser is stopping or an election is being forced. Error - 25/05/2019 17:01:33 | Computer Name = MUESLI-677F0939 | Source = Service Control Manager | ID = 7022 Description = The KService service hung on starting. < End of report >