OTL Extras logfile created on: 1/7/2015 11:06:51 PM - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\justin\Desktop 64bit- An unknown product (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.17498) Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy 11.93 Gb Total Physical Memory | 9.42 Gb Available Physical Memory | 78.99% Memory free 13.74 Gb Paging File | 11.53 Gb Available in Paging File | 83.91% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 905.89 Gb Total Space | 816.30 Gb Free Space | 90.11% Space Free | Partition Type: NTFS Drive D: | 24.60 Gb Total Space | 2.72 Gb Free Space | 11.07% Space Free | Partition Type: NTFS Computer Name: GABBY | User Name: justin | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1" http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error. [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = AC 1C AE C5 46 9F CE 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = [binary data] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade] "UpgradeTime" = Reg Error: Unknown registry data type -- File not found [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "EnableFirewall" = 1 "DisableNotifications" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{0ABA42EE-E0E0-4E95-B6D7-F89787D22C2C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{0B13F5BF-0579-4EA6-930C-9B3A1F4A4CDB}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{0D38A664-49B6-4B0A-992C-15BA04679523}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{0FE0717E-948C-4D43-BA2A-089912BA938A}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{233FB4A4-E730-4425-A6BE-02A45DB3C903}" = rport=138 | protocol=17 | dir=out | app=system | "{235DB90F-2BD0-4C4C-9E73-AF21A6AC522F}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{34442B98-2A3A-45CA-AE77-AAE850CF1BAE}" = rport=137 | protocol=17 | dir=out | app=system | "{37B206B7-98B4-488B-835A-3F7AB2D5028D}" = rport=139 | protocol=6 | dir=out | app=system | "{43501FF2-809D-4033-8523-87ECB356690F}" = lport=445 | protocol=6 | dir=in | app=system | "{5E59B78D-92B9-489D-B731-4A6F1F94E309}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | "{5FEB1347-AA52-44EF-A05A-BF1257E42BEE}" = lport=2869 | protocol=6 | dir=in | app=system | "{63204A30-BC8E-466C-93BB-08897D62865A}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | "{6B6E2ACD-C59D-416C-BC60-9BDBF818A08C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{6E7428CB-C433-438F-9494-236BBB9AF8F7}" = rport=10243 | protocol=6 | dir=out | app=system | "{6F46D015-9485-4C1F-A80A-84B65FC5579F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{737E0CC5-3296-4CFE-A797-47BEAB243D69}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{8922B2E5-39F4-44C1-957D-CB7EF9DCEBFC}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{8A34249B-9644-4C05-B301-6809AD5E5705}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{906305D8-9CD9-4064-B962-E4F1354DCCD1}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{924C222F-40D2-43B9-AFB9-78CA560E4D23}" = lport=138 | protocol=17 | dir=in | app=system | "{9B87B896-3F51-443A-B791-ED2B14DB7F17}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{AC1795FD-A38E-4CCA-A4DB-763F44DBFD5E}" = rport=445 | protocol=6 | dir=out | app=system | "{B1BD0BB7-68F3-4766-90D1-826AC6287925}" = lport=139 | protocol=6 | dir=in | app=system | "{E1E25B99-0869-41F4-A5F1-692AC4650779}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{E7821619-2DE7-49E2-A714-F8DF071FC6C2}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{E8EF1991-DAFE-4944-AD1E-18C267E7862D}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | "{F7BAEBDF-63A8-4BD6-A01B-E5ADF5D98AC7}" = lport=137 | protocol=17 | dir=in | app=system | "{FFAEFD58-66F0-4D89-9461-55BF1D620460}" = lport=10243 | protocol=6 | dir=in | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{02C014E1-D9A1-49B6-8EAF-E790131B1684}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{031E1376-A91D-4710-A86A-B1EBDEB133EA}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\powerdvd12ml.exe | "{039C54F7-1288-4A9F-8BC6-E8A6D3C21996}" = dir=out | name=@{microsoft.bingnews_3.0.4.213_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/brandedapptitle} | "{0678BEEC-CC55-49AD-93E0-AA9E0509EC9F}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{071CBD42-4559-4037-A4DA-D5517C618039}" = dir=out | name=windows_ie_ac_001 | "{099C96AD-7F62-404B-B62C-29E574F9DFA2}" = dir=out | name=@{uptoelevendigitalsolution.mysms-textanywhere_2.5.3.0_x64__c9d6r4qvva5x8?ms-resource://uptoelevendigitalsolution.mysms-textanywhere/resources/display_name} | "{0DE0127B-9B3A-45AE-AA30-D0549B3FB3DE}" = dir=out | name=tripadvisor hotels flights restaurants | "{12B02AD7-2DCE-4B2C-8AC5-92A866435B83}" = dir=in | name=mcafee® central for hp | "{12DFA6A9-DEDD-4CB9-8326-5136C5A9C4D5}" = dir=out | name=@{microsoft.bingtravel_3.0.4.212_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/brandedapptitle} | "{1473B0A9-EB51-41A0-8B6E-87682C87E7DA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{18E84879-871E-4B7F-B1C6-801E5C13DF4C}" = dir=out | name=skype | "{1EECB73B-B7E6-4B75-BC0C-1CF5DF8D534B}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{2ADE0BFE-C612-41CB-A89E-EC856B9EA357}" = dir=out | name=netflix | "{2E651F95-C2A9-4614-8F12-F22B6866955E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{2F985E92-F471-4962-A29D-B7C8961036BC}" = dir=out | name=hp registration | "{316A6253-185F-4FB6-82ED-6080FC08D9E0}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{317383B0-50F9-4A64-B6EB-3D4046EC5C3C}" = dir=in | name=microsoft mahjong | "{331A587B-074F-4BF5-8FF5-81F1F8D880EE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{347D7C2F-4635-460A-B09E-9293203B0C49}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | "{351831C9-A28D-4BC3-B661-2925EEDE7890}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{3D0FB5E1-581D-4633-B5DC-44ADEA34F5A0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{3FE38D88-13C9-4B82-9169-7440797E4268}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe | "{41B1EB56-37AA-464F-9D8D-547808060262}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | "{4C9A1325-BF00-4BD7-A6B7-0FFF17E34326}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{4E29DE49-0667-430D-A8FE-99A3135ABC55}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{520918B3-7AE5-4B1A-B79A-4EF0BCC6F1A2}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{55294280-0BAA-4B38-AE08-EC11D5D8A6D4}" = dir=in | name=microsoft solitaire collection | "{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | "{566FE94E-A871-4821-888F-07486AE4C548}" = dir=in | name=@{ad2f1837.gettingstartedwithwindows8_1.5.3.1_neutral__v10z8vjag6ke6?ms-resource://ad2f1837.gettingstartedwithwindows8/resources/id_app_title} | "{5691AA4E-2AEF-4A1F-9506-3115F4085D38}" = dir=out | name=@{microsoft.bingmaps_2.1.3230.2048_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | "{57296A83-F24B-44E4-A887-4F72CD9D6580}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | "{5C934052-1536-4188-99A0-1930F8CD9E1E}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | "{673BDA04-E27F-450A-980F-0DC59BBB95C9}" = dir=out | name=hp connected photo | "{6784632A-34D9-4E58-BEAA-3EFDE36AC854}" = dir=out | name=@{microsoft.bingweather_3.0.4.249_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/brandedapptitle} | "{697CE835-CCB9-485C-BC3E-7D8065DC64E4}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{6A98656A-ADB1-474B-8B8D-56A80CE5DDD3}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{6BB78EB9-CC7C-4230-8E96-8961C290763D}" = dir=out | name=hp connected drive | "{6CBF7B06-64CD-4CD6-A216-418E50599A83}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3632\agent.exe | "{706C2B7B-3A1D-431F-AF87-5CAAA3825B16}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{715B06E0-DBD4-4647-9C2E-90AF0AE34994}" = dir=in | app=c:\program files (x86)\hewlett-packard\hp support framework\resources\hpwarrantycheck\hpdevicedetection3.exe | "{747A9921-D798-4594-A0CF-442D4EBBE409}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | "{75EE3852-C515-4FF5-B477-92FF17F7E4E5}" = dir=in | name=skype | "{79C9FA43-2D81-407A-BBF1-25A2955D101F}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | "{7A0D8A7E-FFB0-48CD-A622-1BF724A97D9C}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "{7B9D9EF5-CEA9-4EEE-AC32-A3FA120FF2A9}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\powerdvd12.exe | "{80CB954F-BA92-493E-AAEA-2ABABAB94DB5}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20540_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | "{89A480CE-69CC-42DB-BE60-35E41F7C4A24}" = dir=out | name=microsoft mahjong | "{8ADB1731-F542-4FC9-98BB-E2A393F8EFE2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "{8DDC705E-DDD8-4559-A048-A570509FCBED}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\bin\steamwebhelper.exe | "{8F94CC18-2DE9-4D30-AA18-9030C92F4E97}" = dir=out | name=@{microsoft.bingfinance_3.0.4.253_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/brandedapptitle} | "{9253F2FA-3DC1-4CBA-B812-46D38E178D13}" = dir=in | name=onenote | "{92967552-0D8C-4B24-AD68-BA847CC6B8B3}" = dir=out | name=amazon | "{993D0BA3-9FD9-42A7-9A5A-627F4FFCE78E}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe | "{9D50D932-3B66-41EB-AF71-F43FD5BFEA61}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | "{A08B0B40-F6A0-439E-B9FA-8A78B1C8A9D6}" = protocol=6 | dir=out | app=system | "{A539FCC0-0078-4503-81C0-3FA77CAC6817}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{A840E0DD-91BE-4B50-932C-0F60CC36C839}" = dir=out | name=hp connected music | "{A943AFA9-3CFE-4E02-9515-DF3E39E4AA02}" = dir=out | name=onenote | "{A9901E17-F0D3-432E-BF5D-3DA1D4954850}" = dir=in | name=hp connected drive | "{AE504520-75F8-4F5B-8915-64ED29398C6D}" = dir=out | name=@{microsoft.bingtranslator_1.10.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtranslator/resources/appname} | "{B003D050-523B-494B-9BFE-9ECCEF531175}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B8184A90-2832-473A-BC9D-882C27D22551}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.4.253_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | "{BA1926A1-C1B9-4A2E-9F62-AD6AD3F2DD65}" = dir=out | name=@{microsoft.bingsports_3.0.4.244_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/brandedapptitle} | "{BB86E974-35C5-45E5-BBD0-F820F389357B}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\movie\powerdvd.exe | "{C41E8731-121E-4CC4-BF8E-F01ABF9DD1A2}" = dir=out | name=fresh paint | "{C45513F3-81A6-4DB6-A4B9-5C41CF03CF62}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | "{C56AE5A7-5C1D-44EC-9AC0-89C49A3D3C35}" = dir=out | name=@{microsoft.zunemusic_2.6.649.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | "{C61CC92C-0815-4A48-8E0F-8A5519DCBE69}" = dir=out | name=@{microsoft.zunevideo_2.6.432.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | "{C6586AF0-CF5E-41FD-8118-0DE584C53096}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.4.254_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | "{C7526161-7BD2-426B-AA9A-CB43311D15AA}" = dir=out | name=@{ad2f1837.gettingstartedwithwindows8_1.5.3.1_neutral__v10z8vjag6ke6?ms-resource://ad2f1837.gettingstartedwithwindows8/resources/id_app_title} | "{C8DF901A-4405-45AC-A916-5BEA31D94A8B}" = dir=out | name=microsoft solitaire collection | "{C979547C-05A2-4E10-A4A3-2A092F260E65}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{C9FBF537-6C8A-4889-B872-64045D94C30E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{CB6B2534-CCB8-4773-8CE1-A0CC11E8B3E4}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{D1E56CAE-2D42-406F-858C-8EC2BFF59F83}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3632\agent.exe | "{D5B335E3-35AD-4148-9325-06BB29430C9C}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | "{D843511F-2FFC-48CD-8174-BB8DC7D47B99}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd12\kernel\dms\clmsserverpdvd12.exe | "{D8E705A1-E18C-41E6-AB14-C6D7BD1EB2E8}" = dir=out | name=- games app - | "{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | "{DE6737C3-DE1D-4CC3-AB7F-5AC82C4799C2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{E9267EE6-DB68-4E42-A491-F92E717702B4}" = dir=in | name=hp connected photo | "{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | "{F0E8E84F-AE30-4B66-8096-E7C3F53A0B21}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | "{F4A98E78-1059-4F74-8A7E-5597BED68F80}" = dir=out | name=the weather channel for hp | "{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | "{F737E815-87EA-4A0C-9C4C-BADBF699343C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | "{F84E7D03-B92B-4778-912D-A96EABDDCD45}" = dir=out | name=mcafee® central for hp | "{F8E73A85-C8F0-4CC6-B726-A3AD05DA123A}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{FA8CE89E-B156-4F38-81D5-E9AD72E8536E}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe | "TCP Query User{0988DB3E-2E9B-4107-BF67-56D1556C3A4C}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "TCP Query User{175AD827-F82C-4DDA-9F0A-B4CAF3B07889}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe" = protocol=6 | dir=in | app=c:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe | "TCP Query User{788EDF46-F530-4EA3-99E9-D5C084EB7BC8}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe | "TCP Query User{BD2F6151-2D82-45A7-B6CD-BC5B6D4960E8}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe" = protocol=6 | dir=in | app=c:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe | "UDP Query User{98F50051-0E7A-4ABB-AD0C-4621DD4F9626}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe | "UDP Query User{A8510A35-ED27-4843-92E1-A983AB8F2B96}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe" = protocol=17 | dir=in | app=c:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe | "UDP Query User{E609FD04-2CC2-41A3-BBD8-07875E46C934}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe" = protocol=17 | dir=in | app=c:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe | "UDP Query User{F69C435A-9D8A-4CCD-A5B6-8427BFFA3FBE}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 "{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{15134cb0-b767-4960-a911-f2d16ae54797}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{22154f09-719a-4619-bb71-5b3356999fbf}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 "{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}" = Skype™ 7.0 "{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{90150000-0138-0409-0000-0000000FF1CE}" = Microsoft Office "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 "Google Chrome" = Google Chrome "SpywareBlaster_is1" = SpywareBlaster 5.0 "TeamViewer 8" = TeamViewer 8 [color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 1/7/2015 10:53:28 PM | Computer Name = Gabby | Source = Application Error | ID = 1000 Description = Faulting application name: IEXPLORE.EXE, version: 11.0.9600.17416, time stamp: 0x5452eed9 Faulting module name: igdusc32.dll, version: 10.18.10.3574, time stamp: 0x535820be Exception code: 0xc0000005 Fault offset: 0x0013b45c Faulting process id: 0x1a78 Faulting application start time: 0x01d02aedf9bba36b Faulting application path: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Faulting module path: C:\Windows\SYSTEM32\igdusc32.dll Report Id: 84f65a59-96e1-11e4-826a-801934759486 Faulting package full name: Faulting package-relative application ID: Error - 1/7/2015 11:01:42 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Users\justin\Desktop\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/7/2015 11:05:44 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Users\justin\Desktop\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/7/2015 11:05:47 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Users\justin\Desktop\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/7/2015 11:05:47 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Users\justin\Desktop\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/7/2015 11:05:47 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Users\justin\Desktop\esetsmartinstaller_enu.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/7/2015 11:10:11 PM | Computer Name = Gabby | Source = MsiInstaller | ID = 10005 Description = Error - 1/7/2015 11:25:09 PM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Error - 1/8/2015 12:53:41 AM | Computer Name = Gabby | Source = Application Error | ID = 1000 Description = Faulting application name: igfxTray.exe, version: 6.15.10.3574, time stamp: 0x535821b3 Faulting module name: combase.dll, version: 6.3.9600.17031, time stamp: 0x53087867 Exception code: 0xc0000005 Fault offset: 0x0000000000005fc4 Faulting process id: 0x844 Faulting application start time: 0x01d02aff0de9e1e7 Faulting application path: C:\Windows\system32\igfxTray.exe Faulting module path: C:\Windows\SYSTEM32\combase.dll Report Id: 506e683f-96f2-11e4-826b-801934759486 Faulting package full name: Faulting package-relative application ID: Error - 1/8/2015 1:02:24 AM | Computer Name = Gabby | Source = SideBySide | ID = 16842830 Description = Activation context generation failed for "C:\Program Files\CCleaner\CCleaner.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_a9efdb8b01377ea7.manifest. Component 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.17031_none_6242a4b3ecbb55a1.manifest. [ System Events ] Error - 1/7/2015 10:46:23 PM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The MBAMService service failed to start due to the following error: %%2 Error - 1/7/2015 10:46:23 PM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The MBAMScheduler service failed to start due to the following error: %%2 Error - 1/7/2015 10:46:23 PM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The MBAMScheduler service failed to start due to the following error: %%2 Error - 1/7/2015 10:57:18 PM | Computer Name = Gabby | Source = Service Control Manager | ID = 7031 Description = The TeamViewer 8 service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 2000 milliseconds: Restart the service. Error - 1/8/2015 12:50:21 AM | Computer Name = Gabby | Source = DCOM | ID = 10010 Description = Error - 1/8/2015 12:50:21 AM | Computer Name = Gabby | Source = DCOM | ID = 10010 Description = Error - 1/8/2015 12:51:56 AM | Computer Name = Gabby | Source = Service Control Manager | ID = 7009 Description = A timeout was reached (30000 milliseconds) while waiting for the Optimizer Pro Crash Monitor service to connect. Error - 1/8/2015 12:52:03 AM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The MBAMScheduler service failed to start due to the following error: %%2 Error - 1/8/2015 12:52:03 AM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The MBAMService service failed to start due to the following error: %%2 Error - 1/8/2015 12:54:08 AM | Computer Name = Gabby | Source = Service Control Manager | ID = 7000 Description = The GamesAppIntegrationService service failed to start due to the following error: %%2 < End of report >