OTL Extras logfile created on: 3/16/2014 7:30:20 AM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Natasha\Downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.16521) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 3.89 Gb Total Physical Memory | 2.10 Gb Available Physical Memory | 53.98% Memory free 7.78 Gb Paging File | 5.61 Gb Available in Paging File | 72.13% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 450.93 Gb Total Space | 343.14 Gb Free Space | 76.10% Space Free | Partition Type: NTFS Drive E: | 14.63 Gb Total Space | 1.72 Gb Free Space | 11.74% Space Free | Partition Type: NTFS Drive F: | 53.63 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS Computer Name: NATASHA-HP | User Name: Natasha | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- Reg Error: Key error. https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) http [open] -- Reg Error: Key error. https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{01F06C05-2806-459F-ACBE-E80D38B5D4A4}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{04986D69-8AFB-410A-A500-48F8AA9441B5}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{067A480A-0735-419A-B610-A98353B7A2B3}" = rport=138 | protocol=17 | dir=out | app=system | "{079D0057-171E-4087-8E92-2DB7E53F91A4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{346020FF-CD3D-42FB-8775-6756042D20CB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{3B5C410B-31AC-4023-8012-0290775FD0D6}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{600B5DF8-2F3B-4803-B127-0208F9C3B732}" = rport=10243 | protocol=6 | dir=out | app=system | "{6A95832E-302E-4769-9F9A-4982696255A7}" = lport=139 | protocol=6 | dir=in | app=system | "{715C304C-6CDF-4CFB-BE34-337A1DA960FE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{7299BA36-F0A7-49E9-AA97-6978D6A7F07D}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{7D8CE1A8-645D-40A6-AF62-D6FBC4BB7FCF}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{7EC6459D-46D5-4D77-807E-4FC1D228BF50}" = rport=139 | protocol=6 | dir=out | app=system | "{83C176F8-FC16-42C7-A7CD-896DC95CDA86}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{87AF2372-8F05-48CB-B559-BCCF57914DEA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{8E2C27D3-34B4-4C98-9D95-F04CA117CDCD}" = rport=137 | protocol=17 | dir=out | app=system | "{9153AB70-BADC-4103-B3E2-B63DDF307BED}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C2A93205-42C2-4F4A-BB1F-B4F4FC6731F4}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{C2AE49C4-4AF4-4439-9083-DA1D9A9313FA}" = lport=10243 | protocol=6 | dir=in | app=system | "{D39155CC-7E4F-4C91-9B12-7951D0A23FF7}" = lport=138 | protocol=17 | dir=in | app=system | "{D7962F4B-2C8C-48E2-9A99-23FB022B6E28}" = rport=445 | protocol=6 | dir=out | app=system | "{DB25C353-AF68-40D7-97F9-7D5A3B652269}" = lport=445 | protocol=6 | dir=in | app=system | "{F3CCCB68-C82E-4C19-ADD2-77F93041BD08}" = lport=137 | protocol=17 | dir=in | app=system | "{FD61C6CE-06D3-4447-AB5B-30F69371C83C}" = lport=2869 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{06293BDD-ACBB-4380-845C-358401EA9F4A}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{064DD302-0CF5-40BD-AC67-DA80830A8D2F}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{0E46E719-6B61-464B-878A-72F3A14D5248}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{0E9EC648-79AD-4675-86CE-0CF14E65017F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{34388C23-4E21-4198-B7CF-89F88FD4E06F}" = protocol=6 | dir=out | app=system | "{57DCD49C-91D7-4397-8A7A-32288B34576C}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{57F34470-DEE8-4160-838C-FFB844468017}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{5B1A32E6-223B-4B3B-B656-0319D873BB52}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{62D29C37-BE01-4E05-B979-21C30B7428A4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{657E0405-7957-4890-B335-4825AE0B1C71}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{7586D330-A321-4DC3-933E-5A5E8BE2F7A2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{7A0600CF-DB9F-4BD2-8525-197AF1DD4962}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{7B3F2485-0AC6-4A4E-B8CE-1A9A5D60F380}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{7B6AE1FE-6F29-43DC-9435-F6ACF304F031}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{7D8956F0-CF8C-4338-9392-8207F501D6F0}" = protocol=58 | dir=in | app=system | "{7ED7346E-DD4A-4D5E-B96D-2D7807160630}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{C7224D7F-A0DC-4AE3-BD2C-6F5117006AFC}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{C8AD9914-3B17-4F17-A31C-4B18D5891C58}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{CDF76F44-8F49-470D-B807-7827D518EF0F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{D5D5A997-6CBE-4345-AC71-11A17BAE2235}" = dir=in | app=c:\users\natasha\appdata\local\microsoft\skydrive\skydrive.exe | "{D6E3A149-22C3-4DF4-A74B-07D86154D313}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{D9AB3DFD-0366-4233-AD65-32078A6211F8}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{DC0D8C88-425F-4003-862B-2AB90279DDAA}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{DEE0F483-DA9D-4A30-8370-B94BF583EC66}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | "{E0FA25C9-C3EA-4AA3-BB4C-697000F43467}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{E6846E20-826B-446D-BA7A-B738C6F33299}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{EB358B0E-994F-48AF-93FF-002E6DF6F20E}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "TCP Query User{B33661BB-380E-407D-A75A-3579469CEB7C}C:\users\natasha\appdata\roaming\mjusbsp\magicjack.exe" = protocol=6 | dir=in | app=c:\users\natasha\appdata\roaming\mjusbsp\magicjack.exe | "UDP Query User{B63806F0-F2CA-42A1-ACB2-330B1E035699}C:\users\natasha\appdata\roaming\mjusbsp\magicjack.exe" = protocol=17 | dir=in | app=c:\users\natasha\appdata\roaming\mjusbsp\magicjack.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64) "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{3C28BFD4-90C7-3138-87EF-418DC16E9598}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 "{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 "{5EEC477F-8E9B-4420-8829-16E7426227DB}" = Windows Live MIME IFilter "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{6E14E6D6-3175-4E1A-B934-CAB5A86367CD}" = HP Postscript Converter "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1 "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.1 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}" = PlayReady PC Runtime amd64 "{CC4D56B7-6F18-470B-8734-ABCD75BCF4F1}" = HP Auto "{CD95F661-A5C4-44F5-A6AA-ECDD91C240CD}" = WinZip 16.0 "{CE52672C-A0E9-4450-8875-88A221D5CD50}" = Windows Live ID Sign-in Assistant "{E47364AA-6B5E-45a2-B94F-BC5D9D6A0338}" = Canon MF8300 Series "{E9FA781F-3E80-4399-825A-AD3E11C28C77}" = MSVCRT110_amd64 "CutePDF Writer Installation" = CutePDF Writer 3.0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{03D562B5-C4E2-4846-A920-33178788BE00}" = Windows Live Communications Platform "{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements "{0F929651-F516-4956-90F2-FFBD2CD5D30E}" = Photo Gallery "{0FF9CC94-EF23-401E-BDBD-37403D1A2B38}" = Windows Live SOXE Definitions "{2AC01935-3774-4981-98C8-14E93C14372C}" = Windows Live UX Platform Language Pack "{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App "{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}" = opensource "{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "{438363A8-F486-4C37-834C-4955773CB3D3}" = HP Setup "{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager "{45898170-E68C-4F02-AA35-C2186BF347A3}" = Movie Maker "{5A0EE0F0-E909-4F3B-B437-AAD9252427CB}" = Windows Live Installer "{5E094C92-6288-4F43-AA9A-D452D0218F3F}" = Windows Live Essentials "{6389F199-1D6C-4974-9557-693F9DD48736}" = Windows Live Writer Resources "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{6767DFEE-8909-453A-B553-C7693912B2EB}" = Canon MF Toolbox 4.9.1.1.mf09 "{6B6923B9-8719-425B-916C-CD2908F31AAF}" = Windows Live SOXE "{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 "{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 "{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.2.3 "{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp" = WildTangent Games App (HP Games) "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7C6F0282-3DCD-4A80-95AC-BB298E821C44}" = Windows Live Writer "{89870E0D-9602-41F8-9E83-14F6849346A4}" = Windows Live Mail "{89C7E0A7-4D9D-4DCC-8834-A9A2B92D7EBB}" = Photo Gallery "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110 "{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 "{90150000-0138-0409-0000-0000000FF1CE}" = Microsoft Office "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AAA94EAA-40A4-458C-9D86-D1DA765B51D5}" = Windows Live Writer "{B2B7B1C8-7C8B-476C-BE2C-049731C55992}" = HP Support Information "{B39A6825-EA20-43EA-AB2D-A6BC0298D9A1}" = Movie Maker "{BE52A08B-D385-4E65-BDCB-3FCD9BB1DF63}" = Alcor Micro USB Card Reader Driver "{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "{C6B0EE9E-2128-4448-B7AE-5E2B46E0F0E7}" = Windows Live Photo Common "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D604900F-A275-416C-AF9D-CDEDF58B72DB}" = Windows Live Mail "{DD7C5FC1-DCA5-487A-AF23-658B1C00243F}" = Photo Common "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E3445598-4424-4EE2-B71C-C23325F7FB71}" = Windows Live PIMT Platform "{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}" = HP Support Assistant "{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 "{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}" = Google Drive "{E9E34215-82EF-4909-BE2F-F581F0DC9062}" = DirectX for Managed Code Update (Summer 2004) "{EFBCA571-617D-484A-9ECA-E301BB6D0750}" = Windows Live Writer "{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}" = Realtek Card Reader "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics "{F0E58739-2B4C-498F-9B0D-FF0F2FD52B61}" = Windows Live UX Platform "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}" = Junk Mail filter update "{FCB3772C-B7D0-4933-B1A9-3707EBACC573}" = Intel(R) OpenCL CPU Runtime "Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX "Avast" = avast! Free Antivirus "Google Chrome" = Google Chrome "HP Keyboard_is1" = HP Desktop Keyboard "InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go "InstallShield_{BE52A08B-D385-4E65-BDCB-3FCD9BB1DF63}" = Alcor Micro USB Card Reader Driver "InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint "JPG to PDF Converter" = JPG to PDF Converter 1.1 "NIS" = Norton Internet Security "Office8.0" = Microsoft Office 97, Professional Edition "PDF Complete" = PDF Complete Corporate Edition "WildTangent hp Master Uninstall" = HP Games "WinLiveSuite" = Windows Live Essentials "WTA-007118d8-5a2b-4cb9-99f2-dd9701e56c9f" = Golden Trails 2: The Lost Legacy Collector's Edition "WTA-05213f28-51cd-43ef-8040-38c122ec2fba" = Virtual Villagers 4 - The Tree of Life "WTA-0d48476a-b87c-4cb6-a83b-794c3a000726" = Torchlight "WTA-111e04d6-dd6f-47f8-871b-527d29db422a" = Mah Jong Medley "WTA-1b1d67bb-8e7b-402e-86ce-4f128e8015fa" = Luxor HD "WTA-20810af6-cd72-4f24-8b7a-879f37313aac" = Dora's World Adventure "WTA-21dea6a8-af87-4241-a830-f7b46a2f0a54" = 4 Elements II "WTA-25735c02-0acc-4131-be92-aa2553a033c9" = Jewel Quest Mysteries: The Seventh Gate Collector's Edition "WTA-29b75f14-43c4-4aec-93a8-ead9758c5a6d" = Poker Superstars III "WTA-3cbd6b80-7ce6-47a1-ba75-7f4e89f833cd" = Jewel Match 3 "WTA-3f760295-e5de-4072-89b5-bc868dd80318" = Plants vs. Zombies - Game of the Year "WTA-4b459c4d-6a0e-4f2b-9381-55b3016e8451" = Mortimer Beckett and the Crimson Thief Premium Edition "WTA-58415ae6-d749-4fa5-bca8-39780a749aa2" = Blackhawk Striker 2 "WTA-5e913047-1263-4931-8e5a-06bb0183c6e1" = Tales of Lagoona "WTA-6102add4-415e-4279-bc2e-1585e95b7b4f" = FATE "WTA-83582588-767a-4fe1-8fad-8c6326a68c80" = Final Drive Fury "WTA-84d9e347-43a1-4e10-b060-4c53043711dd" = My Farm Life 2 "WTA-87cf9ec6-e87e-4c6c-ae3d-6670b9a0db67" = Polar Bowler "WTA-8d576468-decd-4848-aee3-fdd32e502dbb" = Bejeweled 3 "WTA-8e053be7-216f-4bf8-abe4-d46eeb900e74" = Chuzzle Deluxe "WTA-94781e1b-76b3-4d8b-9e4e-59fdffedbc21" = Youda Fisherman "WTA-975b6950-c516-4052-be70-869b7b693ddb" = Polar Golfer "WTA-98c88ba0-b763-43d0-8efa-ed6f6fb0fdb1" = Roads of Rome 3 "WTA-9e9a1e91-f2a6-49b4-a62d-8b80c0235f3e" = Zuma's Revenge "WTA-c88969fd-4f07-4f30-9515-991beafdab27" = Farm Frenzy "WTA-ccd3cc78-d625-4dc6-ab46-90efb798b666" = Penguins! "WTA-cd7e2c0d-ccc4-4e22-8c82-97865e4039c2" = John Deere Drive Green "WTA-d1e99c98-2ce5-46a8-8d01-c3eb87ae250f" = Farmscapes "WTA-d9cd2a85-2c5b-42db-b3bb-a038c2d8f30a" = Hoyle Card Games "WTA-dc185b82-c6ed-40ec-ae9c-6397b201ddc4" = Escape the Emerald Star "WTA-e8c10b97-eeaf-4318-b129-2ebf4def9be0" = Cradle of Rome 2 [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "magicJack" = magicJack "SkyDriveSetup.exe" = Microsoft SkyDrive [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 11/28/2013 5:59:02 AM | Computer Name = Natasha-HP | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 10810 Error - 11/28/2013 5:59:02 AM | Computer Name = Natasha-HP | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 10810 Error - 11/28/2013 5:59:03 AM | Computer Name = Natasha-HP | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 11/28/2013 5:59:03 AM | Computer Name = Natasha-HP | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 11809 Error - 11/28/2013 5:59:03 AM | Computer Name = Natasha-HP | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 11809 Error - 12/4/2013 1:48:39 AM | Computer Name = Natasha-HP | Source = Application Error | ID = 1000 Description = Faulting application name: IEXPLORE.EXE, version: 10.0.9200.16736, time stamp: 0x5258c4cc Faulting module name: Flash32_11_2_202_222.ocx, version: 11.2.202.222, time stamp: 0x4f459f86 Exception code: 0xc0000005 Fault offset: 0x000ccca0 Faulting process id: 0x12b0 Faulting application start time: 0x01cef05e60e0eae9 Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\SysWOW64\Macromed\Flash\Flash32_11_2_202_222.ocx Report Id: b8f3642c-5ca7-11e3-9c22-d4c9eff0caba Error - 1/26/2014 9:07:46 AM | Computer Name = Natasha-HP | Source = Microsoft-Windows-CAPI2 | ID = 513 Description = Cryptographic Services failed while processing the OnIdentity() call in the System Writer Object. Details: AddLegacyDriverFiles: Unable to back up image of binary vhlbfhai. System Error: The system cannot find the file specified. . Error - 1/26/2014 9:52:43 AM | Computer Name = Natasha-HP | Source = SideBySide | ID = 16842832 Description = Activation context generation failed for "D:\autorun.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error - 2/5/2014 11:27:38 PM | Computer Name = Natasha-HP | Source = Application Hang | ID = 1002 Description = The program IEXPLORE.EXE version 11.0.9600.16428 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 12d0 Start Time: 01cf22e9ed743375 Termination Time: 13 Application Path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Report Id: Error - 2/6/2014 8:15:12 AM | Computer Name = Natasha-HP | Source = System Restore | ID = 8210 Description = [ System Events ] Error - 2/12/2014 7:27:18 AM | Computer Name = Natasha-HP | Source = Service Control Manager | ID = 7023 Description = The Windows Time service terminated with the following error: %%1115 Error - 2/19/2014 3:16:25 AM | Computer Name = Natasha-HP | Source = Disk | ID = 262155 Description = The driver detected a controller error on \Device\Harddisk1\DR1. Error - 2/22/2014 1:39:15 AM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 1:27:04 PM on ?2/?21/?2014 was unexpected. Error - 2/26/2014 12:32:40 PM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 10:32:15 AM on ?2/?26/?2014 was unexpected. Error - 2/27/2014 12:11:13 PM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 9:44:42 AM on ?2/?27/?2014 was unexpected. Error - 3/3/2014 7:44:14 PM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 11:23:37 PM on ?3/?2/?2014 was unexpected. Error - 3/6/2014 7:18:47 PM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 10:43:20 PM on ?3/?5/?2014 was unexpected. Error - 3/7/2014 7:41:23 AM | Computer Name = Natasha-HP | Source = EventLog | ID = 6008 Description = The previous system shutdown at 5:12:25 AM on ?3/?7/?2014 was unexpected. Error - 3/9/2014 10:49:44 PM | Computer Name = Natasha-HP | Source = NetBT | ID = 4300 Description = The driver could not be created. Error - 3/9/2014 10:49:44 PM | Computer Name = Natasha-HP | Source = NetBT | ID = 4300 Description = The driver could not be created. < End of report >