UndeadSummonerMila

July 20, 2012

I checked it, what ever it is isn't showing up on the list... I even got rid of its fire wall and used windows firewall.

I used Rammap and something is modifying the ram at 1.4million k

July 16, 2012

Sorry to double post, can't figure out how to edit... I think I figured it out again... I wonder if it could be the firewall?

July 16, 2012

I thought the problem was solved. My brother was able to use it yesterday without the RAM shooting up to high heaven.

It was only on for about 9 hours and the ram went back up to about 80% with only MSN running.

I thought it had an overheating problem... Since the computer has a problem where the vent is blocked by its own monitor.

June 29, 2012

Yeah, the scan came up empty.

June 27, 2012

But the % never ever goes back down. it stays at 70 - 90 and then shuts off

June 26, 2012

well when it wakes up from hibernate its at an insane usage... Yesterday it was at 88 and I tried to install updates thinking that might have been it...

Guess it wasn't a glitch...

June 26, 2012

Could it be something to do with shutting the lid? Thats usually when it does it.

June 26, 2012

4 gigs of ram.

Something's up because I checked the resource monitor and it was full of modified memory.

Just ran a scan last night with avast nothing was found...

No unusual tasks.

June 25, 2012

I am running a laptop that has a small issue, something is eating all of its ram... Not sure what's causing it... I've had it for 3 years

Its a windows 7 dell laptop...

I hardly use it other than to power the speakers and charge my Iphone... I do use it for a few other things but nothing too taxing.

June 24, 2012

The incredibar search is still there... I am not sure about the AVG search... I'm not even sure why that's even there... She had no antivirus and I put Avast on her computer...

June 24, 2012

Its still there.

June 23, 2012

All processes killed

========== OTL ==========

Unable to set value : HKU\S-1-5-21-2729589744-3720136073-1283141420-1003\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E!

Registry key HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1003\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

HKU\S-1-5-21-2729589744-3720136073-1283141420-1004\SOFTWARE\Microsoft\Internet Explorer\Main\\bProtector Start Page| /E : value set successfully!

HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Unable to set value : HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1003\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E!

HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully!

Registry key HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.

Registry key HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}\ not found.

Registry key HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}\ not found.

C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\defaults\preferences folder moved successfully.

C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\defaults folder moved successfully.

C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\content\imgs\flgs folder moved successfully.

C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\content\imgs folder moved successfully.

Folder move failed. C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\content scheduled to be moved on reboot.

C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com\components folder moved successfully.

Folder move failed. C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com scheduled to be moved on reboot.

Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.

Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ not found.

C:\Users\Briana~\AppData\Roaming\PerformerSoft folder moved successfully.

C:\4c8370469825473f33ed179d19\searchplugins folder moved successfully.

C:\4c8370469825473f33ed179d19 folder moved successfully.

C:\Users\Briana~\AppData\Local\Babylon\Setup\searchplugins folder moved successfully.

C:\Users\Briana~\AppData\Local\Babylon\Setup\HtmlScreens folder moved successfully.

C:\Users\Briana~\AppData\Local\Babylon\Setup folder moved successfully.

C:\Users\Briana~\AppData\Local\Babylon folder moved successfully.

C:\ProgramData\Babylon folder moved successfully.

C:\Users\Briana~\AppData\Roaming\Babylon folder moved successfully.

========== FILES ==========

File\Folder C:\Program Files (x86)\BabylonToolbar not found.

========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Briana~

->Temp folder emptied: 406943 bytes

->Temporary Internet Files folder emptied: 2690734 bytes

->Google Chrome cache emptied: 363732689 bytes

->Apple Safari cache emptied: 67752960 bytes

->Flash cache emptied: 58678 bytes

User: Default

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 56478 bytes

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

->Flash cache emptied: 0 bytes

User: Gooby

->Temp folder emptied: 38459 bytes

->Temporary Internet Files folder emptied: 7576366 bytes

->Google Chrome cache emptied: 377817958 bytes

->Flash cache emptied: 23823 bytes

User: Guest

->Temp folder emptied: 1386 bytes

->Temporary Internet Files folder emptied: 27646725 bytes

->Google Chrome cache emptied: 362040036 bytes

->Flash cache emptied: 5232 bytes

User: Owner

->Temp folder emptied: 0 bytes

User: Public

->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 1713888 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32 (64bit) .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 1840 bytes

%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33177 bytes

%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 36032207 bytes

RecycleBin emptied: 7582429 bytes

Total Files Cleaned = 1,197.00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.52.0 log created on 06232012_192029

June 23, 2012

OTL Extras logfile created on: 6/23/2012 12:09:00 PM - Run 1

OTL by OldTimer - Version 3.2.52.0 Folder = C:\Users\Briana~\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.96 Gb Total Physical Memory | 2.15 Gb Available Physical Memory | 54.15% Memory free

7.92 Gb Paging File | 5.80 Gb Available in Paging File | 73.16% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 297.99 Gb Total Space | 253.70 Gb Free Space | 85.14% Space Free | Partition Type: NTFS

Computer Name: OWNER-PC | User Name: Briana~ | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1003\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML.Gooby] -- Reg Error: Key error. File not found

[HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\SOFTWARE\Classes\<extension>]

.html [@ = ChromeHTML.Briana~] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htafile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 %1 (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htafile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [bridge] -- C:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

"FirewallDisableNotify" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirewallDisableNotify" = 0

"AntiVirusDisableNotify" = 0

"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

========== Firewall Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{184355A1-BA61-4FE0-B036-B64DDABECB71}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{2CE66972-C789-4F06-972D-3E74562E5686}" = lport=138 | protocol=17 | dir=in | app=system |

"{2F153D30-81FB-40F8-8953-A8ABDB67BC28}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{4A4A7EF3-C536-42FF-8B8A-6721AE87F1F9}" = rport=10243 | protocol=6 | dir=out | app=system |

"{53076A44-3C06-4921-AEAE-4EC5C2FAAF9E}" = lport=445 | protocol=6 | dir=in | app=system |

"{588932F3-8269-4AEA-A96A-8DBB56F78FB6}" = lport=2869 | protocol=6 | dir=in | app=system |

"{6C6045FA-EC3D-4C8D-97BA-A961F94BCD1A}" = lport=10243 | protocol=6 | dir=in | app=system |

"{71E6C909-EF2E-4BD2-A934-6484E08625DF}" = lport=139 | protocol=6 | dir=in | app=system |

"{747E696E-3DDC-4661-B424-4BE151576161}" = rport=445 | protocol=6 | dir=out | app=system |

"{7A739EE6-C380-4356-8FBC-A2B94B0D5D0D}" = lport=137 | protocol=17 | dir=in | app=system |

"{9CB2C371-40CA-4CDE-9942-B98FADB3BF39}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{A538B998-416D-4FDE-8DDB-909B3FBFD7A0}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{A7020724-6AA0-4957-8ECA-D95CD663EF1F}" = rport=139 | protocol=6 | dir=out | app=system |

"{BE9B13D5-EFB5-45D8-8C07-2DE5BEBF7DF7}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{C2434F1B-A424-4D65-B4BE-94153CADC62A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{D9EBF892-CD85-4927-B71D-45799279C58A}" = rport=137 | protocol=17 | dir=out | app=system |

"{E24CD8FF-F6AC-4F4E-8700-DAC41BB9CEB8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{ED64DE5F-C5AA-497A-B367-8EB36E65FD17}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{F06ACF02-0EAB-4603-91EC-64ADABA6E2A5}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{F5F9FC75-95B4-46B0-8ADE-3D3B6404BF2A}" = rport=138 | protocol=17 | dir=out | app=system |

"{FD865062-D37E-446F-9FFD-91D92A730018}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{00ED9723-B1D4-4AA5-8EB6-81ABA7B72617}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{2A2A0430-2249-4064-8720-C42451FF8A93}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{346D3D0F-1E04-43B9-99C6-4CDDCAA3296B}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{3AAB84AA-59E9-4D93-91A6-B1A3C6910F9E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{523022F8-39B5-4C0A-8B2E-178719C5FAFB}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{5BE4282F-E8D1-4C97-8E4B-243700240D52}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{5F46F155-E963-465B-AA3C-F99906A2B612}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{601B1952-A9AB-4959-A3B7-1F3FC24D8583}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"{61A161C1-21DE-4974-A99C-3C8CEAEF465D}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |

"{6963B6D1-B59B-4E63-A0F5-18E77164D1B8}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |

"{7AA0DC20-3D4D-473A-8D92-C27538EDD128}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |

"{7FF88468-627A-4D46-BE22-55B1061C7565}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |

"{831386BB-EB1E-419A-89ED-6AF1DF4A1C90}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{899B147C-12DB-40B9-AB35-9E2A4D77A75C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{89A91B74-BFAD-4CAC-8EC0-39BBF44AEF96}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{8C648BC7-11A2-4C6A-8B4C-0A78546C20AF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{9C54427A-F004-4FA7-92A4-EACBF9B7AABE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{A5254097-9320-4A1F-A65F-11FB3B04B2B1}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{BB30F4BD-60A5-4C03-9956-81A7DCB56143}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{BE35815C-061E-439C-8522-6F03542D1B55}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{C72C7233-A10F-4B2E-940F-D741738DE6AE}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |

"{C81A3A8E-3575-482E-A660-3EA80F3FBF17}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{CB8641E6-593B-4DCF-9A43-6285F81FEA46}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe |

"{CF33E731-6679-444F-8B94-6CC31089AF5B}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |

"{D0034AF4-69C7-4A69-81AD-70DCF866EB22}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd9.exe |

"{D0F666E6-D558-492B-885A-0A2592ED1E3C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{DB200A35-2C86-457B-8018-B9E6746D5B95}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{E28C44D2-9641-4510-9764-115528D82BF9}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe |

"{E33BA2DC-FA56-4AC3-BE17-7D79AF87438E}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd9\powerdvd cinema\powerdvdcinema.exe |

"{EC8AA469-B723-46FB-9A9A-445FBCE19BC9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{ED30A997-302B-453E-B5D1-81A46F48A28B}" = protocol=6 | dir=out | app=system |

"{F70BF394-3AF6-4258-B69F-22E0C050B892}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"TCP Query User{7444276F-5DB5-4CE3-A1EE-20E4E86A3310}C:\program files (x86)\1clickdownload\1clickdownloader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\1clickdownload\1clickdownloader.exe |

"TCP Query User{EDC5FCCF-04A6-483E-80C8-311CB7BB5442}C:\users\owner\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\owner\appdata\roaming\spotify\spotify.exe |

"UDP Query User{21D0A23B-A436-486A-82BE-48A0215B5C76}C:\program files (x86)\1clickdownload\1clickdownloader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\1clickdownload\1clickdownloader.exe |

"UDP Query User{63C2B64A-70C0-481C-A174-E636226A6B24}C:\users\owner\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\owner\appdata\roaming\spotify\spotify.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0335701D-8E28-4A7F-B0EF-312974755BB2}" = Modem Diagnostic Tool

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java 6 Update 20 (64-bit)

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour

"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64

"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Dell Touchpad

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support

"{CF8FFD12-602B-422D-AF1D-511B411E7632}" = iTunes

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"CCleaner" = CCleaner

"HDMI" = Intel® Graphics Media Accelerator Driver

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology

"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = Netwaiting

"{42929F0F-CE14-47AF-9FC7-FF297A603021}" = Dell Resource CD

"{451517F1-7E41-400B-AA36-FB7E2563526D}" = Dell Wireless Driver Installation

"{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

"{9866E5F0-121F-E018-E2D1-2E1770847ABF}" = Adobe Download Assistant

"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.5

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6

"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari

"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)

"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect

"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support

"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"Adobe AIR" = Adobe AIR

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"avast" = avast! Internet Security

"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant

"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.5

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400

"TeamViewer 7" = TeamViewer 7

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Google Chrome" = Google Chrome

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2729589744-3720136073-1283141420-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Google Chrome" = Google Chrome

========== Last 20 Event Log Errors ==========

[ Application Events ]

Error - 6/22/2012 9:47:42 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 620229

Error - 6/22/2012 9:47:43 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/22/2012 9:47:43 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 621243

Error - 6/22/2012 9:47:43 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 621243

Error - 6/22/2012 10:24:52 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/22/2012 10:24:52 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 1030

Error - 6/22/2012 10:24:52 PM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 1030

Error - 6/23/2012 12:02:53 AM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 6/23/2012 12:02:53 AM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 5882860

Error - 6/23/2012 12:02:53 AM | Computer Name = Owner-PC | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 5882860

[ Media Center Events ]

Error - 6/22/2012 8:19:54 PM | Computer Name = Owner-PC | Source = MCUpdate | ID = 0

Description = 8:19:54 PM - Error connecting to the internet. 8:19:54 PM - Unable

to contact server..

[ System Events ]