OTL Extras logfile created on: 2013-11-23 5:15:10 PM - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Adam\Downloads
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.16438)
Locale: 00001009 | Country: Canada | Language: ENC | Date Format: yyyy-MM-dd
 
3.47 Gb Total Physical Memory | 1.96 Gb Available Physical Memory | 56.53% Memory free
6.97 Gb Paging File | 4.77 Gb Available in Paging File | 68.36% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 439.82 Gb Total Space | 282.55 Gb Free Space | 64.24% Space Free | Partition Type: NTFS
Drive D: | 24.83 Gb Total Space | 2.95 Gb Free Space | 11.87% Space Free | Partition Type: NTFS
 
Computer Name: GUPPY | User Name: Adam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.hlp[@ = WinHelpCustomView.Scenario] -- Reg Error: Key error. File not found
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.hlp [@ = WinHelpCustomView.Scenario] -- Reg Error: Key error. File not found
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-3944088404-3407540696-4144186254-1002\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = AC 1C AE C5 46 9F CE 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{190A0302-B926-4743-AE03-A78D846C7C78}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{2370D851-8AA9-4C6C-A7C4-E00A29C9FCBD}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{26B0FD51-88DB-4F05-B9C8-033A13861CEB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{3B9705C9-6720-4ECE-B2DD-DED1BD97C2A2}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | 
"{3EF2965E-7981-4E30-B6B1-AECD8E2E974D}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{43B01835-E883-4BBE-AED0-05C76F0580D7}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{49579CF9-D5C0-4B95-A74E-244659130C8E}" = lport=139 | protocol=6 | dir=in | app=system | 
"{534A99C1-8ADE-4E1C-852F-AFBEFC55CF41}" = lport=138 | protocol=17 | dir=in | app=system | 
"{58D8C20C-8686-42A8-9D4B-E8A4996DE679}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{679EA95B-B21A-4351-B2FD-53BB0D0B8F19}" = rport=138 | protocol=17 | dir=out | app=system | 
"{6CFA2075-75CE-440E-956B-7400E51EEFC3}" = lport=445 | protocol=6 | dir=in | app=system | 
"{74939120-5021-4063-967C-A1688D959A45}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{7EF3339B-5740-4848-BA18-8126C5B4EF55}" = rport=137 | protocol=17 | dir=out | app=system | 
"{8F9EFF14-00DB-4BF9-91EA-C4B9CDA15229}" = lport=137 | protocol=17 | dir=in | app=system | 
"{9189603E-3E69-4418-B946-F371769F3A34}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{A30FF77B-E483-47E8-A0C5-931072CD2822}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{A5038372-A5C6-47E8-894D-19CB486E9DDA}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{AE23DEB7-CB1B-436E-95E0-68639AE646AB}" = rport=445 | protocol=6 | dir=out | app=system | 
"{BFA5ABF6-A5D8-4758-ABC0-04AC96BCE409}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{C5831626-8403-445C-AE1B-250C5346BC4A}" = rport=139 | protocol=6 | dir=out | app=system | 
"{C9985E08-66E8-41FF-AC6A-040C86E6A230}" = lport=53000 | protocol=6 | dir=in | name=hpconnectedremoteservice.exe | 
"{D69A4838-8AEC-423F-8CD1-1C422FE5D42B}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{D8756E25-D908-4981-A650-D6D49805868F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{DC3FEC75-7C3C-4514-A026-A6A5C0DE4C06}" = lport=52000 | protocol=6 | dir=in | name=hpconnectedremoteuser.exe | 
"{E28B6E25-748E-4A4F-92EA-5440CDF61EB3}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{E7E8EEA3-C9C3-42EB-AEC8-4163593B2F56}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{E99E67B5-84A3-40E1-A477-B65474832CF5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{EE9FF562-742B-4AF9-BA88-6F2A6D66A8D1}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0004F985-B40B-46EB-A0C3-217DFAED980D}" = dir=out | name=@{microsoft.reader_6.2.9200.20780_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{00FD348E-E099-4958-8BD3-028DD4686C6C}" = dir=in | name=savings center featured offers | 
"{047C4FA4-E68E-44D7-9F2E-81E97CEC4C03}" = protocol=6 | dir=in | app=c:\program files\kmspico\twrt73jsvvj.exe | 
"{09F81333-A870-498D-ABE3-99C3C477BB30}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{0A5427D9-1987-40CA-89D0-7EFD63C3C313}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | 
"{0A9B1A25-C75E-40BD-8FC7-906318EDD4A4}" = dir=in | name=microsoft mahjong | 
"{0E5733B7-284C-4D5A-85FD-051B37DFE31C}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd10\powerdvd10.exe | 
"{11420DEE-2079-4E46-B3B0-AD51A9E89B36}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{13AAB4AE-6BF5-4EF4-B074-4CBD13471A6B}" = dir=out | name=savings center featured offers | 
"{13C64044-5986-4495-A56C-F4E6DB4787A6}" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\dirt2\dirt2_game.exe | 
"{16074159-A42C-489C-863B-EADA739EA933}" = dir=out | name=@{microsoft.xboxlivegames_2.0.139.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | 
"{164C665F-A36F-4229-BB16-2CEB9C1D0989}" = protocol=17 | dir=in | app=c:\program files\kmspico\twrt73jsvvj.exe | 
"{16E24ED3-2213-4779-BFF2-EC103082B00D}" = dir=out | name=@{microsoft.bingnews_3.0.1.285_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/apptitle} | 
"{189B9E4E-99B9-40B0-B403-4A63FBF362F7}" = dir=in | app=%localappdata%\hpconnectedmusic\application\spotify_helper.exe | 
"{1C8719AD-0206-4211-BDDA-1A6698F7D6CF}" = dir=out | name=twitter | 
"{1EAC581D-E4D6-433C-B430-66B1DA074B30}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{2022C56E-99DD-49A4-BFEA-8C016964F838}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{2186FFC8-F109-4F65-95CA-54E8CA86E4CE}" = dir=out | app=c:\program files (x86)\hpconnectedmusic\hpconnectedmusic.exe | 
"{24AEC82F-507E-4326-ACCC-D92249D1835D}" = dir=in | app=%localappdata%\hpconnectedmusic\application\hpconnectedmusic.exe | 
"{281E9ED8-D8DF-44DB-A142-BA8EF4859A63}" = protocol=6 | dir=in | app=c:\games\f1 2013\f1_2013.exe | 
"{286C61AE-7604-4FB8-AD8C-3B4BB191C74E}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{29C5344B-EE4F-483F-9BE8-40A6FBA9CE12}" = dir=out | name=@{microsoft.bingweather_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | 
"{2A0A5EDE-AE8A-46F2-8D5E-16DB190BBF1A}" = dir=out | name=f5 vpn | 
"{2BDCD419-6139-4B3E-B4A6-539C8196C627}" = dir=in | app=c:\users\administrator\appdata\local\microsoft\skydrive\skydrive.exe | 
"{32A7EA8B-BAA5-4714-88EF-EAEC8DA5F772}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{33DECD46-AB09-405B-AF0B-B3DE18F47D6B}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{35514EA6-8AF8-4C49-9D7E-CAC554BEE0AE}" = dir=out | name=windows_ie_ac_001 | 
"{35CC6776-21AD-4D4A-8C04-2ECAF605B8A5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{3681AA32-4972-474B-B056-C2367FC81294}" = dir=in | name=hp+ | 
"{37371158-B57F-4F88-B1BA-DBF69F8C0042}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | 
"{378471A9-1DF2-46A3-9AAA-077ADE9AC8F5}" = dir=out | name=@{microsoft.bingfinance_3.0.1.299_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | 
"{37C1CB55-74A0-40AC-B093-1FB83EF8683A}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{37DD5239-B0B5-465B-B0B7-3E5C64436A6A}" = dir=out | name=skype | 
"{37FF859C-8C5A-4C10-862C-FAC8A5C20EF3}" = dir=out | name=ebay | 
"{3B3E558A-EA64-45D4-8BBD-2B5497A1B2B7}" = dir=out | name=@{microsoft.bingnews_2.0.0.308_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/news} | 
"{3DF50D81-5402-4FDF-A146-4426E2EB86D9}" = dir=out | name=microsoft solitaire collection | 
"{3FF184AB-C93E-43BD-A072-FD5A6DF88EE3}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | 
"{4282FE99-8560-4BC7-9576-5F3ED84E263F}" = dir=in | name=checkpoint.vpn | 
"{46DBE0B5-2332-4809-A629-376201C54848}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{4AA40FD9-8523-4293-B978-B6CC017882E4}" = dir=in | app=c:\program files (x86)\hpconnectedmusic\hpconnectedmusic.exe | 
"{4D0F24A3-257E-4231-A738-040A08421C49}" = dir=out | name=@{microsoft.windowsreadinglist_6.3.9654.20321_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | 
"{4E1E164E-ABB0-4383-8157-6E6B68EE784F}" = protocol=17 | dir=in | app=c:\games\f1 2013\f1_2013.exe | 
"{548DCF8C-BFF2-4BA4-AA88-FBAF9AC8BCC6}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{55D0280A-D234-4D5E-9317-620349807398}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\zoo tycoon 2\zt.exe | 
"{560448D6-095C-4907-B046-AC7F710701A7}" = dir=in | name=sonicwall.mobileconnect | 
"{59C6D79E-96A2-42AB-AA36-F60940DCED66}" = dir=out | name=@{microsoft.bingtravel_2.0.0.308_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | 
"{5C2E291E-4632-46FE-84BA-BD7F6C96D319}" = dir=out | name=hp connected photo powered by snapfish | 
"{5ED8900F-D669-4C83-846F-DDD90DE94B54}" = dir=out | name=hp+ | 
"{5F4632C0-D5B1-40C3-B0D9-E3A759C81B9E}" = dir=out | name=sonicwall.mobileconnect | 
"{5FF64E2A-76B5-4973-A3E6-B99815ECCBEC}" = dir=out | name=@{microsoft.zunemusic_1.5.146.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{60596353-B613-40B8-9CF2-1B82A748E649}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | 
"{61BEFF2D-29E8-428F-B2F7-260049D8D132}" = dir=out | name=iheartradio | 
"{622B1044-E928-418B-9A76-B58383A0AD7F}" = dir=in | name=@{microsoft.windowsreadinglist_6.3.9654.20321_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsreadinglist/resources/apppackagename} | 
"{64CCC72D-2081-4EA6-988B-EA6439229AC5}" = dir=out | name=@{microsoft.bingmaps_2.0.2210.2401_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | 
"{659997A7-502C-4FCE-AA18-84F544ECB514}" = dir=out | name=hp games | 
"{675B895D-EB47-436C-8CC5-1D2C7A233048}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 
"{68735580-15BE-47D9-8F10-2714E1C44931}" = dir=out | name=check point vpn | 
"{706B4467-FBC8-4EA1-9067-3FB9D4B40F05}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{72179F01-211E-4427-ACD9-25106CAF61F5}" = dir=out | name=nakedchem | 
"{7704E4D6-0D3B-463D-B29A-46D871510ADD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{798C261B-E2C7-4B8D-B24B-3337E3BCF5E4}" = dir=in | name=sonicwall mobile connect | 
"{79A2BFE3-D42E-46DB-972D-50EA3985D5DC}" = dir=in | app=c:\program files (x86)\splashtop\splashtop remote\server\srserver.exe | 
"{7E23141A-9A4E-4782-9F64-22C9AAB32E77}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{7F8BDEB6-6B86-42DE-AF9F-07C01D7FBE86}" = dir=out | name=@{microsoft.zunemusic_2.2.299.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{8010152B-43BA-4195-9395-160109D32DA1}" = dir=out | name=getting started with windows 8 | 
"{808F1451-4108-46FD-ADBB-F17324B5F0BD}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{809E0067-67E4-47E8-83DA-618243795B41}" = dir=in | name=hp connected photo powered by snapfish | 
"{80E5BF52-CD63-4A1D-B8CA-D831AEEE0394}" = protocol=6 | dir=out | app=system | 
"{824EB5BC-22E9-4DAC-A55A-88518BFBC0A7}" = dir=out | app=%localappdata%\hpconnectedmusic\application\spotify_helper.exe | 
"{875F393C-5835-4D29-88C5-BED6FC3BF9DC}" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\dirt2\dirt2_game.exe | 
"{8A46CA1B-E479-44AD-8BEA-1AA1BB4C8929}" = dir=out | name=@{microsoft.bingsports_2.0.0.310_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | 
"{8C523228-DA5F-4761-A22E-DE54AD2878D0}" = dir=in | name=skype | 
"{95675B13-5C79-4EE4-8913-ADFDD922DDEA}" = dir=out | name=hp registration | 
"{99B0ACAC-2890-4FA2-A382-794331DF36F9}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9B968013-C551-47FD-8C16-2ADE10309C01}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{9C0B21F6-ED17-4B61-871D-9E9F91AA72A8}" = dir=in | name=f5 vpn | 
"{9E3D57FC-7C37-4424-9352-4831E97D029D}" = dir=out | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{9E8B10BA-8D91-4B87-BA08-131CD9251732}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{9F33ED1F-CF0D-4E24-846F-AA618EB6FFB9}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{A238241D-162D-40DF-9B6F-CF5AFA4CDD78}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\zoo tycoon 2\zt.exe | 
"{A37BB287-3E7C-4370-95D1-7D797F3F496C}" = dir=out | name=@{microsoft.bingweather_2.0.0.310_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/apptitle} | 
"{A3FBE333-F171-4447-9FEA-C3CE017F6736}" = dir=out | name=@{microsoft.bingtravel_3.0.1.202_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingtravel/resources/apptitle} | 
"{A56F57BA-F8CB-4C3A-A17F-0AD695B1100A}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{A6A39593-B9E2-485A-9AD6-7BF0786FCE9E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{AA3E8582-54AB-4EE6-A3CC-A54C3EA9F2E6}" = dir=in | app=c:\program files (x86)\cyberlink\powerdirector10\pdr10.exe | 
"{AC9B3500-FEDA-4408-9F5F-94D061FF934D}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{ADB07B5D-EEE8-4265-8363-98D0CB2C99E3}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | 
"{B0D8D45A-0EC0-48D2-9D18-86190992BFF5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B11CC2F4-9044-4BB0-8371-143A5CC3E9DA}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{B778F921-F06E-40F0-9C88-709A308CEE96}" = dir=out | name=microsoft mahjong | 
"{BCB0D712-0336-4731-B093-AD38C49F790C}" = dir=out | name=windows_ie_ac_001 | 
"{C228C03E-32A3-4962-A23F-49D13F529EFC}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{C49CC3D8-1D2A-409D-8173-4DBDB4514D89}" = dir=out | name=juniper networks junos pulse | 
"{C6774D65-4CF0-4A84-851B-A328523F8B7E}" = dir=out | name=@{microsoft.zunevideo_2.2.299.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{C80AA4B8-6590-4A82-88ED-4ECE089D4AC1}" = dir=out | name=@{microsoft.bingsports_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/bingsports} | 
"{C95D2A9F-9217-4663-A5E5-12EA2D71BF46}" = dir=in | name=microsoft solitaire collection | 
"{CB691436-8390-4C28-803E-7DD379B3A3EB}" = dir=out | name=netflix | 
"{CBCB08C5-69C3-4D8A-AFC0-A47718874F99}" = dir=out | name=sonicwall mobile connect | 
"{CF492A67-2DDB-449F-8C79-F7D46DF23C07}" = dir=in | name=juniper networks junos pulse | 
"{D06E4422-F10B-4307-A8A5-7DFA7E67156B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | 
"{D3F928CE-F62C-4846-90CA-55543D04A603}" = dir=in | name=check point vpn | 
"{D4AD1900-D293-44A8-831A-E1F91906F474}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{D6980480-941A-4DF6-AB81-3734ECD3D779}" = dir=out | name=junipernetworks.junospulsevpn | 
"{DB17E9B3-0573-427F-AB74-8065A005734B}" = dir=out | app=%localappdata%\hpconnectedmusic\application\hpconnectedmusic.exe | 
"{DB59588E-ED90-4C47-A7B5-7929DD0C0BD2}" = dir=out | name=checkpoint.vpn | 
"{DB9C937B-AD91-41E3-BD53-D56F89F4EE62}" = dir=out | name=@{microsoft.bingfoodanddrink_3.0.1.201_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfoodanddrink/resources/apptitlewithbranding} | 
"{DC2C4E33-1638-42DB-AC21-449DA99A3057}" = dir=in | name=@{microsoft.reader_6.2.9200.20780_x64__8wekyb3d8bbwe?ms-resource://microsoft.reader/resources/shortdisplayname} | 
"{E0A306D5-DFD7-44BC-A8F8-54F887B39B29}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{E3992473-A69E-4636-A3C1-8CEF6C38E473}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.5.9600.20315_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/resources/communicationspackagename} | 
"{E4CA47C2-4AA7-444F-95A3-AFC61754AA9A}" = dir=in | app=c:\program files (x86)\splashtop\splashtop remote\server\dataproxy.exe | 
"{E69C7CB9-5FAE-4273-81A7-B1EB0660A93D}" = dir=out | name=@{microsoft.binghealthandfitness_3.0.1.203_x64__8wekyb3d8bbwe?ms-resource://microsoft.binghealthandfitness/resources/apptitle} | 
"{E7985E1D-C36F-4787-80A8-6350D07E9266}" = dir=in | name=@{c:\windows\winstore\resources.pri?ms-resource://winstore/resources/displayname} | 
"{E8E4D7C6-0BB2-44A1-95BD-F52D63B85C6A}" = protocol=17 | dir=in | app=c:\users\adam\appdata\roaming\utorrent\utorrent.exe | 
"{E8EBEBE0-1A8A-4DDC-ACAC-D7EAA96C3825}" = protocol=6 | dir=in | app=c:\users\adam\appdata\roaming\utorrent\utorrent.exe | 
"{E9CAF795-0DE6-41EC-B8EB-AC9B80E1F4F7}" = dir=out | name=@{microsoft.bingmaps_1.6.1821.2624_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingmaps/resources/appdisplayname} | 
"{EC799E33-72BA-42D7-9127-DEFE68F9799D}" = dir=in | name=junipernetworks.junospulsevpn | 
"{ECFB7394-20BD-4905-A750-C9C02EA8C169}" = dir=out | name=windows_ie_ac_001 | 
"{EDE3A636-668C-451F-810C-4B97B66E5E0A}" = dir=out | name=@{microsoft.bingfinance_1.2.0.135_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/apptitle} | 
"{EEF38518-99B6-4ED5-A94C-1545EEA3B87B}" = dir=in | app=c:\program files (x86)\splashtop\splashtop remote\server\srfeature.exe | 
"{F13B0B19-85F5-4D4B-9984-1E1389FD17A9}" = dir=out | name=@{microsoft.xboxlivegames_1.3.10.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxlivegames/resources/34150} | 
"{F2090538-957B-459C-A4DC-36B8539D9C52}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{F2B0E253-D67D-4073-90A7-3817C1542385}" = protocol=17 | dir=in | name=hpconnectedremoteservice.exe | 
"{F4024CD7-521B-4F10-8493-86EAEF281694}" = dir=out | name=myhomework | 
"{F57DCF3A-4B0D-41EE-A150-E434ACA533A3}" = dir=out | name=kindle | 
"{F64300AD-D559-4000-BD45-0997BCC8E70A}" = dir=out | name=f5.vpn.client | 
"{F77E5446-4378-4E99-8B7A-7061AAAEA193}" = dir=in | name=f5.vpn.client | 
"{F8A3E29E-73F6-46D9-91F6-671689E2BF75}" = dir=out | name=norton studio | 
"{F8FD8A4D-DCD1-4D01-8282-CB37D5103A09}" = dir=out | name=@{microsoft.zunevideo_1.5.41.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{F9C5DB89-32E5-4E83-8AD1-707543BD0685}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"TCP Query User{12EDA310-F3DE-43D9-B3AA-1A596E4C8913}C:\need for speed(tm) rivals-sg\nfs14.exe" = protocol=6 | dir=in | app=c:\need for speed(tm) rivals-sg\nfs14.exe | 
"TCP Query User{1A248047-B7A9-4240-B301-5DFCFD43D0F3}C:\program files (x86)\rfactor\rfactor.exe" = protocol=6 | dir=in | app=c:\program files (x86)\rfactor\rfactor.exe | 
"TCP Query User{1B7A2027-0125-46FF-87C5-5E40DFF97BE9}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"TCP Query User{3678B219-D87F-4A67-BC6A-5AD4F77EC7B3}C:\users\adam\desktop\games\need for speed(tm) rivals-sg\nfs14.exe" = protocol=6 | dir=in | app=c:\users\adam\desktop\games\need for speed(tm) rivals-sg\nfs14.exe | 
"TCP Query User{4664BFF0-2FEC-4095-AF97-45DA7A57F20E}C:\program files (x86)\atari\tdu2\testdrive2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\atari\tdu2\testdrive2.exe | 
"TCP Query User{48CE8347-E3FE-4A7E-BA7D-F3E92815C6B2}C:\program files (x86)\city car driving\bin\win32\starter.exe" = protocol=6 | dir=in | app=c:\program files (x86)\city car driving\bin\win32\starter.exe | 
"TCP Query User{638CD3CD-B4FC-4573-8C55-9CA9C53F7437}C:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\n8ic1tvu\utorrent.exe" = protocol=6 | dir=in | app=c:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\n8ic1tvu\utorrent.exe | 
"TCP Query User{65ED0FC8-9414-4C68-887C-92A731612D09}C:\users\adam\desktop\assettocorsa\acs.exe" = protocol=6 | dir=in | app=c:\users\adam\desktop\assettocorsa\acs.exe | 
"TCP Query User{66D20504-9AEA-46AD-ADED-8E4AC6E62A04}C:\tdu2\testdrive2.exe" = protocol=6 | dir=in | app=c:\tdu2\testdrive2.exe | 
"TCP Query User{6AFD28B9-1F78-4DD4-B354-6219FAD4D48A}C:\program files (x86)\skype\phone\skype.exe" = protocol=6 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"TCP Query User{88ACFE6D-1531-42DD-AAD6-BF9527D46255}C:\program files (x86)\jd simwheel server\wheelserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jd simwheel server\wheelserver.exe | 
"TCP Query User{8F088114-CCF6-47B9-A8FE-A2E5A268949D}C:\users\adam\downloads\3dmgame-assetto.corsa.early.access.cracked-3dm\assettocorsa\acs.exe" = protocol=6 | dir=in | app=c:\users\adam\downloads\3dmgame-assetto.corsa.early.access.cracked-3dm\assettocorsa\acs.exe | 
"TCP Query User{A3F092C6-F862-47D8-8E31-A991B3EA5FAE}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"TCP Query User{A99644BA-15ED-4F60-B2B6-2AAFB5C60435}C:\users\adam\downloads\assettocorsa\acs.exe" = protocol=6 | dir=in | app=c:\users\adam\downloads\assettocorsa\acs.exe | 
"TCP Query User{C3BE44C8-885B-43DC-87A1-445DA5378578}C:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\1zyvk67k\utorrent.exe" = protocol=6 | dir=in | app=c:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\1zyvk67k\utorrent.exe | 
"TCP Query User{C85591A3-B53E-4924-B3B5-7D5F090C5913}C:\users\adam\appdata\local\temp\temp1_mtkv249.zip\microsoft toolkit.exe" = protocol=6 | dir=in | app=c:\users\adam\appdata\local\temp\temp1_mtkv249.zip\microsoft toolkit.exe | 
"TCP Query User{CB4E02F4-C16A-4CF4-906C-C67114E9E814}C:\users\adam\downloads\need for speed(tm) hot pursuit 2010\need for speed(tm) hot pursuit\nfs11.exe" = protocol=6 | dir=in | app=c:\users\adam\downloads\need for speed(tm) hot pursuit 2010\need for speed(tm) hot pursuit\nfs11.exe | 
"TCP Query User{D2F2CB10-B194-4766-9565-D68BA7D8DE1A}C:\program files (x86)\atari\tdu2\_uplauncher.exe" = protocol=6 | dir=in | app=c:\program files (x86)\atari\tdu2\_uplauncher.exe | 
"TCP Query User{F1C74D49-12D2-4D79-9723-5DE932EB621F}C:\need for speed(tm) rivals-sg\nfs14_x86.exe" = protocol=6 | dir=in | app=c:\need for speed(tm) rivals-sg\nfs14_x86.exe | 
"UDP Query User{196C2603-DFA4-4585-8ADE-AA8E575EA549}C:\users\adam\downloads\3dmgame-assetto.corsa.early.access.cracked-3dm\assettocorsa\acs.exe" = protocol=17 | dir=in | app=c:\users\adam\downloads\3dmgame-assetto.corsa.early.access.cracked-3dm\assettocorsa\acs.exe | 
"UDP Query User{1CB111EC-35A3-4810-B981-444650C3EAF0}C:\program files (x86)\skype\phone\skype.exe" = protocol=17 | dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"UDP Query User{2BD7C229-96D1-4C01-AAAB-3326F295EF29}C:\users\adam\downloads\assettocorsa\acs.exe" = protocol=17 | dir=in | app=c:\users\adam\downloads\assettocorsa\acs.exe | 
"UDP Query User{2D5E15F1-1DD5-4B4F-B17B-6E3BAF0C8C25}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | 
"UDP Query User{6B4F0151-9F6C-4FBF-9452-2BCB57614530}C:\program files (x86)\atari\tdu2\_uplauncher.exe" = protocol=17 | dir=in | app=c:\program files (x86)\atari\tdu2\_uplauncher.exe | 
"UDP Query User{7523D96F-C59A-4061-ACA4-05FF2821FF0E}C:\program files (x86)\rfactor\rfactor.exe" = protocol=17 | dir=in | app=c:\program files (x86)\rfactor\rfactor.exe | 
"UDP Query User{7CF3B300-5710-4097-81A3-DAFB6FAD12D9}C:\need for speed(tm) rivals-sg\nfs14_x86.exe" = protocol=17 | dir=in | app=c:\need for speed(tm) rivals-sg\nfs14_x86.exe | 
"UDP Query User{96559ECD-6F7E-46F4-8000-AA10A558AA42}C:\program files (x86)\city car driving\bin\win32\starter.exe" = protocol=17 | dir=in | app=c:\program files (x86)\city car driving\bin\win32\starter.exe | 
"UDP Query User{96FD23D5-214B-4683-82CF-61E77CEB3ADE}C:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\1zyvk67k\utorrent.exe" = protocol=17 | dir=in | app=c:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\1zyvk67k\utorrent.exe | 
"UDP Query User{A25E0966-69DF-4654-BFEA-FC64C6C3BD20}C:\users\adam\desktop\games\need for speed(tm) rivals-sg\nfs14.exe" = protocol=17 | dir=in | app=c:\users\adam\desktop\games\need for speed(tm) rivals-sg\nfs14.exe | 
"UDP Query User{B23F8510-8316-4BF4-BE1E-6FEFEB274B62}C:\users\adam\desktop\assettocorsa\acs.exe" = protocol=17 | dir=in | app=c:\users\adam\desktop\assettocorsa\acs.exe | 
"UDP Query User{B311162B-8963-4528-A604-864A04E743B8}C:\need for speed(tm) rivals-sg\nfs14.exe" = protocol=17 | dir=in | app=c:\need for speed(tm) rivals-sg\nfs14.exe | 
"UDP Query User{B9402C34-64A9-4E7B-8904-28CE5C1B6DB8}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe | 
"UDP Query User{BFAFE7C9-A01B-4CC5-B825-3879E09A9CF2}C:\program files (x86)\atari\tdu2\testdrive2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\atari\tdu2\testdrive2.exe | 
"UDP Query User{C39C0B03-298C-4229-BE32-C8DDF3D0615E}C:\tdu2\testdrive2.exe" = protocol=17 | dir=in | app=c:\tdu2\testdrive2.exe | 
"UDP Query User{D2DB53DF-4074-4B22-A10F-830AD7BC6416}C:\users\adam\downloads\need for speed(tm) hot pursuit 2010\need for speed(tm) hot pursuit\nfs11.exe" = protocol=17 | dir=in | app=c:\users\adam\downloads\need for speed(tm) hot pursuit 2010\need for speed(tm) hot pursuit\nfs11.exe | 
"UDP Query User{D9A80B1C-7217-45A1-B56B-CF3BB4AFEC1F}C:\program files (x86)\jd simwheel server\wheelserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jd simwheel server\wheelserver.exe | 
"UDP Query User{DA5F5860-2744-4BAD-AF90-9E9703BCD7BA}C:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\n8ic1tvu\utorrent.exe" = protocol=17 | dir=in | app=c:\users\adam\appdata\local\microsoft\windows\temporary internet files\content.ie5\n8ic1tvu\utorrent.exe | 
"UDP Query User{F99B07FA-6F97-435A-8C56-BEAC673E6EDF}C:\users\adam\appdata\local\temp\temp1_mtkv249.zip\microsoft toolkit.exe" = protocol=17 | dir=in | app=c:\users\adam\appdata\local\temp\temp1_mtkv249.zip\microsoft toolkit.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{256D3424-92D8-FA96-125D-0700B58667BA}" = ccc-utility64
"{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610
"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support
"{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1" = MotioninJoy Gamepad tool 0.7.1001
"{3CEC10BE-CD7C-8E99-E3AC-DD31F4416C1C}" = AMD Catalyst Install Manager
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{6821D775-9303-46DD-977A-2D97CA18B054}" = HP 3D DriveGuard
"{6E14E6D6-3175-4E1A-B934-CAB5A86367CD}" = HP Postscript Converter
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{764384C5-BCA9-307C-9AAC-FD443662686A}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013
"{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013
"{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013
"{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013
"{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013
"{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013
"{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English
"{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français
"{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español
"{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013
"{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013
"{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013
"{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013
"{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013
"{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013
"{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013
"{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013
"{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013
"{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013
"{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013
"{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013
"{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013
"{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A535111D-95C8-487F-869E-CE4C239972D2}" = iTunes
"{C2E428EB-116E-41C0-9E84-B22DE9CCA42F}" = HP Registration Service
"{EDE23522-7F0D-FB7F-BE3F-50FAF10A7315}" = AMD Fuel
"{F56E1723-78D2-E94E-FDF4-6B6B313A9E93}" = AMD Accelerated Video Transcoding
"{F842F8B0-6942-4930-821F-543E976B2C66}" = MSVCRT110_amd64
"Office15.PROPLUSR" = Microsoft Office Professional Plus 2013
"SynTPDeinstKey" = Synaptics Pointing Device Driver
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{0C57987A-A03A-4B95-A309-D23F78F406CA}" = HP Utility Center
"{0DCCD5F4-29E7-4AA0-8C1D-F8E1503B91F4}" = Catalyst Control Center - Branding
"{1057511B-F8FE-4230-9ED3-AB949A57EE4A}" = Windows Live PIMT Platform
"{109E2EAE-4CFF-4326-BC02-60C043D5732B}_is1" = 2011 BMW 1M version 1.0
"{12404376-8B4D-6DC3-7A24-A0733542EC27}" = AMD VISION Engine Control Center
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F43F3B1-97D6-D5AA-5563-BF4C15D728D6}" = CCC Help Hungarian
"{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite 10
"{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}" = Need for Speed™ Carbon
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 40
"{29315CEC-E6CE-4394-84DC-6F862E8D9A52}" = Windows Live UX Platform
"{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8
"{2D416A80-0BB1-4D8B-B770-7BE8F53D5937}" = Windows Live UX Platform Language Pack
"{303DEA22-6554-3CA4-089A-B6AE6C758310}" = CCC Help Korean
"{312F8C1E-4E5A-59FA-1B1A-3012CE06AD52}" = CCC Help French
"{3364B3AE-FE5A-4430-BE1B-FF1F0EE75E45}_is1" = "F1 2013"
"{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
"{40F55150-F43D-4C9F-9A00-1A0A6F1EB7F0}" = Movie Maker
"{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2
"{44D111C5-BF92-77AF-AA3E-B88CF44BD25B}" = CCC Help German
"{46316411-80D8-4F68-8118-696E05FCE199}" = Windows Live Essentials
"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support
"{4862344A-A39C-4897-ACD4-A1BED5163C5A}" = CyberLink PhotoDirector
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C1F8B61-15CF-3E63-11AB-E2408945F814}" = CCC Help Czech
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.10
"{4F9A382F-4478-4036-905C-F77DF2EA0370}" = Windows Live SOXE
"{4FA8F084-C42F-45E1-B7E5-E0C8A1083DC5}" = Windows Live SOXE Definitions
"{528AB81B-D65A-4AB0-A2B6-82B51A087D01}" = HP Recovery Manager
"{52D1D62C-FEAB-4580-849E-1DB624BADBBD}" = DiRT2
"{546816AA-54F2-F015-0A84-55602C4F5EB9}" = CCC Help Swedish
"{5CC4C963-F772-4766-BFF2-DE551E205EE9}" = Photo Common
"{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX
"{5E98C043-BA3C-DB7B-B50D-2608F4264411}" = CCC Help Norwegian
"{60A1253C-2D51-4166-95C2-52E9CF4F8D64}" = Photo Gallery
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{64DF7404-9D46-44AF-AFA1-A2F8D5648C2D}" = Windows Live Photo Common
"{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}" = Microsoft Games for Windows Marketplace
"{6D96E21A-323A-A74A-4308-97DEE6520B26}" = CCC Help Italian
"{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.2.1.1
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73EEB538-A9EB-0B56-DEC0-415CD210C088}" = Catalyst Control Center InstallProxy
"{75652759-10D5-405C-F1AB-51DA2BB5AE37}" = CCC Help Danish
"{76EE8FE7-1957-4C51-9074-4930A8CFB1AF}" = Windows Live Installer
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{795C2356-1DCD-056C-4200-5EB321C2EBE4}" = CCC Help Japanese
"{7B2CC3DF-64FA-44AE-8F57-B0F915147E4F}_is1" = Need For Speed™ World
"{81B4F7A5-7640-8F88-FBF9-378114A07742}" = CCC Help Thai
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8704FEEF-A6A8-4E7E-B124-BD6122C66E2C}" = HP CoolSense
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}" = MSVCRT110
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{941DE69D-6CEE-4171-8F1F-3D7E352AA498}" = HP Wireless Button Driver
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{97BAD78F-A180-0847-601C-E17FC5B3A2FC}" = Catalyst Control Center Localization All
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9AF7D6F5-50A5-432C-9F7B-83BCE03B11A0}" = SpinTires Tech Demo (June 040613)
"{9B2E55F8-5BA8-4A45-9682-ACB6F2CC0DA5}" = Photo Gallery
"{9B4BBCC4-1EBC-43B5-BBEB-89687A2334B7}" = Snap.Do
"{9C35EDE5-4B0F-45E7-A438-314BA889948E}" = HP MyRoom
"{a1909659-0a08-4554-8af1-2175904903a1}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
"{A2E95309-79F3-41E5-94C7-6D7FD6D7BBC3}" = HP Documentation
"{A407FC22-36BF-4C82-A516-59D94BC505A9}" = System Requirements Lab Detection
"{A41A2E10-D0A8-EDB9-D3F2-9925A5F0622F}" = CCC Help Chinese Traditional
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A65BE769-2D1F-59E1-B562-5ADBE6580A63}" = CCC Help Greek
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAEA701B-847A-B89A-FBB3-3EB57603A031}" = CCC Help Polish
"{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}" = CyberLink PowerDirector 10
"{B12DE754-0AB6-9CCF-0F5E-A5FF154BAD1A}" = CCC Help Portuguese
"{B406605B-45FE-4D8F-8250-1E77479583AE}" = Zoo Tycoon 2 - Marine Mania
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B7C5EA94-B96A-41F5-BE95-25D78B486678}" = Splashtop Streamer
"{BA73469B-D8C7-4FE3-B33C-1340D09F0709}" = Windows Live Communications Platform
"{BD083B26-55E0-9946-A54E-5E0DF4EAC842}" = CCC Help Dutch
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Qualcomm Atheros Driver Installation Program
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C7906616-7599-D41D-0571-05079B1DFF5F}" = CCC Help Finnish
"{CBC80763-5461-9694-40DE-88631826C64E}" = CCC Help Russian
"{CE8C0A62-66A1-06F2-EE0C-B5F18A4902EB}" = CCC Help Turkish
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.3.22 Game
"{D71BC54E-A4E6-4E06-866C-FD6EE16EA187}" = Movie Maker
"{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E39D60BC-4AA6-7C3C-EC66-3B9C7C6D0FB4}" = CCC Help English
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E5823036-6F09-4D0A-B05C-E2BAA129288A}" = HP Quick Launch
"{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
"{ECD18A31-E89D-AE44-5D47-BC4A4EA3C00C}" = Catalyst Control Center Graphics Previews Common
"{ED991A16-D96E-CE4E-6F8C-026F53F5EED8}" = CCC Help Chinese Standard
"{EE202411-2C26-49E8-9784-1BC1DBF7DE96}" = HP Support Assistant
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F243A34B-AB7F-4065-B770-B85B767C247C}" = HP Connected Remote
"{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}" = Energy Star
"{FEFB5F73-1B5D-01F7-2F85-60F841B1B3C7}" = CCC Help Spanish
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Advanced SystemCare 7_is1" = Advanced SystemCare 7
"DAEMON Tools Ultra" = DAEMON Tools Ultra
"Driver Booster_is1" = Driver Booster
"Euro Truck Simulator 2  v1.5.2.1s with Going East DLC1.5.2.1s" = Euro Truck Simulator 2  v1.5.2.1s with Going East DLC
"Google Chrome" = Google Chrome
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite 10
"InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}" = CyberLink Power2Go 8
"InstallShield_{4862344A-A39C-4897-ACD4-A1BED5163C5A}" = CyberLink PhotoDirector
"InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}" = CyberLink PowerDirector 10
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}" = CyberLink PowerDVD
"IObit Surfing Protection_is1" = Surfing Protection
"IObitUninstall" = IObit Uninstaller
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Need For Speed The Run_R.G. Mechanics_is1" = Need For Speed The Run
"OpenAL" = OpenAL
"Origin" = Origin
"Splashtop Software Updater" = Splashtop Software Updater
"StartHPConnectedMusic" = HP Connected Music (Meridian - installer)
"TDU2 Unofficial Patch" = TDU2 Unofficial Patch
"TDU2 Unpacker GUI" = TDU2 Unpacked
"Test Drive Unlimited 2_is1" = Test Drive Unlimited 2
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 5.00 (32-bit)
"Zoo Tycoon 1.0" = Zoo Tycoon: Complete Collection
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3944088404-3407540696-4144186254-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{7d3c27ad-1277-459a-9582-2170e35ad206}" = Snap.Do Engine
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 2013-11-22 7:25:24 AM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1328
 
Error - 2013-11-22 10:22:08 AM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 2013-11-22 10:22:08 AM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 10605953
 
Error - 2013-11-22 10:22:08 AM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 10605953
 
Error - 2013-11-22 10:11:12 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 2013-11-22 10:11:12 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 1422
 
Error - 2013-11-22 10:11:12 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1422
 
Error - 2013-11-22 10:11:13 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 2013-11-22 10:11:13 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2734
 
Error - 2013-11-22 10:11:13 PM | Computer Name = Guppy | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2734
 
[ System Events ]
Error - 2013-11-17 4:32:33 AM | Computer Name = Guppy | Source = Service Control Manager | ID = 7011
Description = A timeout (30000 milliseconds) was reached while waiting for a transaction
 response from the HPWMISVC service.
 
Error - 2013-11-17 4:38:07 AM | Computer Name = Guppy | Source = DCOM | ID = 10016
Description = 
 
Error - 2013-11-17 1:17:39 PM | Computer Name = Guppy | Source = DCOM | ID = 10016
Description = 
 
Error - 2013-11-17 1:18:36 PM | Computer Name = Guppy | Source = Service Control Manager | ID = 7034
Description = The Search Protect by Conduit Service service terminated unexpectedly.
  It has done this 1 time(s).
 
Error - 2013-11-17 5:46:12 PM | Computer Name = Guppy | Source = EventLog | ID = 6008
Description = The previous system shutdown at 2:21:42 PM on ?11/?17/?2013 was unexpected.
 
Error - 2013-11-17 5:46:32 PM | Computer Name = Guppy | Source = Service Control Manager | ID = 7000
Description = The Search Protect by Conduit Service service failed to start due 
to the following error:   %%2
 
Error - 2013-11-17 5:47:14 PM | Computer Name = Guppy | Source = Schannel | ID = 36888
Description = A fatal alert was generated and sent to the remote endpoint. This 
may result in termination of the connection. The TLS protocol defined fatal error
 code is 43. The Windows SChannel error state is 252.
 
Error - 2013-11-17 5:48:15 PM | Computer Name = Guppy | Source = Service Control Manager | ID = 7030
Description = The LogMeIn Hamachi Tunneling Engine service is marked as an interactive
 service.  However, the system is configured to not allow interactive services. 
 This service may not function properly.
 
Error - 2013-11-17 5:49:51 PM | Computer Name = Guppy | Source = DCOM | ID = 10016
Description = 
 
Error - 2013-11-17 8:08:18 PM | Computer Name = Guppy | Source = Schannel | ID = 36888
Description = A fatal alert was generated and sent to the remote endpoint. This 
may result in termination of the connection. The TLS protocol defined fatal error
 code is 43. The Windows SChannel error state is 252.
 
 
< End of report >