OTL Extras logfile created on: 30/11/2015 16:20:54 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Wydia\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18097)
Locale: 00000421 | Country: Indonesia | Language: IND | Date Format: dd/MM/yyyy

7,84 Gb Total Physical Memory | 2,92 Gb Available Physical Memory | 37,23% Memory free
15,68 Gb Paging File | 10,61 Gb Available in Paging File | 67,68% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 135,13 Gb Total Space | 50,36 Gb Free Space | 37,27% Space Free | Partition Type: NTFS
Drive E: | 97,65 Gb Total Space | 88,39 Gb Free Space | 90,52% Space Free | Partition Type: NTFS

Computer Name: WYDIA-PC | User Name: Wydia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

[color=#E56717]========== Security Center Settings ==========[/color]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========[/color]


[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{059B8073-64C5-4322-9343-B326DD731698}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0830EE2A-4AAD-4D86-803B-F8F64D068228}" = lport=3052 | protocol=6 | dir=in | name=fbeventport |
"{11DA4C41-ED96-4A5B-9832-DA0F7F4A8527}" = lport=3051 | protocol=6 | dir=in | name=accurateport |
"{1817999F-75E9-43ED-9F69-0F3DE6937E3F}" = rport=139 | protocol=6 | dir=out | app=system |
"{18EDD655-38DC-4D61-ACEC-D559A9CFD60E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1909B043-EC51-4041-86EA-6A4A1227B1DF}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{261CDDB4-9713-4AB8-981C-19E12A5FB3D0}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{2F9D0B49-D15F-4A8A-9C7F-D5303C9C04BC}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3D6FEF76-EF42-442D-A549-1774B1982E55}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4866CB10-E10B-4990-9F64-81B7A7C82C82}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4CB43A55-83C3-4D2A-9248-AD9736B4026E}" = rport=137 | protocol=17 | dir=out | app=system |
"{6A368C66-1375-4253-B8F3-734B3BD9C3C7}" = lport=138 | protocol=17 | dir=in | app=system |
"{6E9A76F8-3363-40D8-96C2-B3B7C5964053}" = lport=445 | protocol=6 | dir=in | app=system |
"{804A60E4-1D30-4C2E-9D1C-32310563AD42}" = lport=137 | protocol=17 | dir=in | app=system |
"{9321CDA0-3FFA-4618-83DE-7AC3D3294DA3}" = rport=138 | protocol=17 | dir=out | app=system |
"{9AC510B6-8567-4283-9A0D-62F2518CC9C7}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{9C687F92-4C23-497F-A989-2F3418BBC0E4}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{B5D6FC8D-3CFA-4CE2-8797-CEACB0AEAEAE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BD615669-5108-44ED-BC03-6D395CBCDB31}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BDCB483E-B37B-40B7-B0AD-BF543FDD80E7}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{BEE3E9CA-8D88-45E8-B201-0A820E7E7A88}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe |
"{D31A9F04-BD90-43AF-9554-D0CD40F83D98}" = lport=139 | protocol=6 | dir=in | app=system |
"{DF693CF1-1464-48BE-ADBC-2ADA0C5A9B71}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{E12EFDF4-D671-4B64-90C9-92D118041D72}" = lport=34613 | protocol=6 | dir=in | name=accuratesrvlic |
"{E8DD558A-A371-4192-B7AF-86C71F4F1FF2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F689761E-6F4F-43AF-8729-62907F17353C}" = rport=445 | protocol=6 | dir=out | app=system |
"{F8767756-7674-46B0-8420-FECB218F5DFA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe |

[color=#E56717]========== Vista Active Application Exception List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{049427A7-4B4E-4CEF-9346-83DD5B4AA8B6}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{0FE8ABF8-A92B-4F91-91D1-69ABEAA2432F}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{1916E8A2-4D47-45EA-8DCA-A5FB61B60E1E}" = protocol=17 | dir=in | app=c:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe |
"{30DD30B9-E37F-444D-9A31-847B22CC189F}" = protocol=6 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"{36140D85-4E94-4D55-B9ED-C46D5E5F0A0A}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{3D9B1ADB-BF80-4F01-963E-90428CC0ECF0}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\devicesetup.exe |
"{3E28B6AA-18C1-4B01-BC62-C23E3B6BB77C}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{55C6DB00-27CE-4F59-BC78-DE3776E29C25}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{5A681EB4-12CF-43F3-9C51-3E39148642D8}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{5F918B6A-4A45-4F21-AFDF-41F87BAD757F}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{67D5EB9A-5A13-4E8A-9903-A78BBEA2A8A7}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"{6A105AD5-B42D-458A-B2CD-517D08B68C6B}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{6F924BA9-4571-4AF4-9409-AA93D72B1A87}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{840AEB05-804B-47D6-8CC7-CCC295C30932}" = dir=in | app=c:\program files\hp\hp officejet pro 8600\bin\hpnetworkcommunicator.exe |
"{A0D52AEF-F2D4-42E2-B0A9-97FD27E6A06B}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{A62F40F0-36BB-4D19-8B10-9163FFDA0E0B}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{B288F906-1A6E-4091-B0DA-7B67BE63ACAE}" = protocol=6 | dir=in | app=c:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe |
"{B33B9A05-812E-4AC4-935B-F36DAD715986}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer_service.exe |
"{C4A278C8-0967-4FFA-89CA-85466AB5A8E6}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe |
"{C629F513-0997-4605-9A17-FE155E163665}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{CFE14CAC-772F-4982-9481-292763B081EA}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe |
"{DA744C33-A512-44DC-97E5-FD928B876BD7}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version8\teamviewer.exe |
"{E616781A-112A-4E07-8484-7B066757BA0C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{E622FC6E-73D4-4AFD-B989-663929D79EFC}" = protocol=17 | dir=in | app=c:\program files (x86)\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{01DDBDC8-DE2B-4F0F-B5BF-99DBC83F67B7}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{2E454921-8B06-4998-BA6E-7E4539CCF0DA}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=6 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |
"TCP Query User{7CDCDEF3-9F36-446C-A9FA-B71C41BE7B8F}C:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe |
"TCP Query User{B2524FA8-2D7C-43C4-A92D-C3DC97697C55}C:\users\wydia\appdata\local\{03f7df81-cb42-79f4-0ad9-3aa1ea1ea098}\syshost.exe" = protocol=6 | dir=in | app=c:\users\wydia\appdata\local\{03f7df81-cb42-79f4-0ad9-3aa1ea1ea098}\syshost.exe |
"TCP Query User{DD137CA0-1B45-449A-BDEA-54C78427247D}C:\premier11\myobp.exe" = protocol=6 | dir=in | app=c:\premier11\myobp.exe |
"TCP Query User{EE087EE0-32E4-40CB-85EA-71A75D999D1A}C:\program files (x86)\cpssoft\accurate4 standard\accurate.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cpssoft\accurate4 standard\accurate.exe |
"TCP Query User{F72453AD-C1A5-4AD9-8DBC-265BD27F55E3}C:\program files (x86)\cpssoft\accurate4 enterprise\accurate.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cpssoft\accurate4 enterprise\accurate.exe |
"UDP Query User{15DDA445-B68F-4C61-873B-26E3F584A24A}C:\program files (x86)\cpssoft\accurate4 enterprise\accurate.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cpssoft\accurate4 enterprise\accurate.exe |
"UDP Query User{2E5C8B38-19C0-4606-A382-464065C59AE7}C:\program files (x86)\epson software\event manager\eeventmanager.exe" = protocol=17 | dir=in | app=c:\program files (x86)\epson software\event manager\eeventmanager.exe |
"UDP Query User{442143B4-8FFD-426B-A079-506B63AB0D21}C:\users\wydia\appdata\local\{03f7df81-cb42-79f4-0ad9-3aa1ea1ea098}\syshost.exe" = protocol=17 | dir=in | app=c:\users\wydia\appdata\local\{03f7df81-cb42-79f4-0ad9-3aa1ea1ea098}\syshost.exe |
"UDP Query User{6DCD23F8-F126-492B-ADD3-176F3E0685BA}C:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\wydia\appdata\roaming\dropbox\bin\dropbox.exe |
"UDP Query User{81B52420-54FC-492E-8955-AAA90B0DE65B}C:\program files (x86)\cpssoft\accurate4 standard\accurate.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cpssoft\accurate4 standard\accurate.exe |
"UDP Query User{82CD58E1-96FD-412E-A561-EF085313E7A6}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{F173BFE1-442D-4527-AE5B-038EF889DB6B}C:\premier11\myobp.exe" = protocol=17 | dir=in | app=c:\premier11\myobp.exe |

[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C59D5-5CFD-4672-929A-D9A40A266366}" = SAP Crystal Reports runtime engine for .NET Framework (64-bit)
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series" = Canon MP280 series MP Drivers
"{1374CC63-B520-4f3f-98E8-E9020BF01CFF}" = Windows XP Mode
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{26784146-6E05-3FF9-9335-786C7C0FB5BE}" = Microsoft .NET Framework 4.5.2
"{2BFA9B05-7418-4EDE-A6FC-620427BAAAA3}" = Crystal Reports Basic Runtime for Visual Studio 2008 (x64)
"{2D5E3D2B-919F-407C-8757-E64827518BB6}" = HP Officejet Pro 8600 Basic Device Software
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010
"{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5.2
"{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 2052" = Microsoft .NET Framework 4.5.1 (简体中文)
"{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 327.02
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 327.02
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.14.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.1031
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.14.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{BC53D13E-0443-31D9-8CEC-ED2EDDB2690F}" = Microsoft .NET Framework 4.5.1 (CHS)
"{F792E5B0-11C4-4C68-8A63-FB5F52749180}" = HP Officejet Pro 8600 Product Improvement Study
"Bullzip PDF Printer_is1" = Bullzip PDF Printer 9.3.0.1516
"CCleaner" = CCleaner
"CutePDF Writer Installation" = CutePDF Writer 3.0
"EPSON L100 Series" = EPSON L100 Series Printer Uninstall
"EPSON L120 Series" = EPSON L120 Series Printer Uninstall
"EPSON L210 Series" = EPSON L210 Series Printer Uninstall
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR 4.20 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel(R) USB 3.0 eXtensible Host Controller Driver
"{263B71A8-BE92-43FE-B70F-20A99C9635D1}" = MYOB Premier v11
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{3361D415-BA35-4143-B301-661991BA6219}" = MyEpson Portal
"{350612EB-55FE-47DC-8E07-197B2409909B}" = VPN Client
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{4AD7370B-0DD2-430C-8640-E7E473FFD695}" = MYOB ODBC Direct v7
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.12
"{6D1221A9-17BF-4EC0-81F2-27D30EC30701}" = Skype Click to Call
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7F4CFF03-15E4-45BD-BFA3-5323A8EAE2F1}_is1" = PDF Password Remover
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{85DF2EED-08BC-46FB-90DA-28B0D0A8E8A8}" = HP Update
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}" = Software Updater
"{8F01524C-0676-4CC1-B4AE-64753C723391}" = Epson Event Manager
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{981B38A6-E4D0-4D94-98C2-75AC645755F5}" = BlueStacks Notification Center
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0382E3C-7384-429A-9BFA-AF5888E5A193}" = Acer Crystal Eye Webcam
"{A0C7AA86-7065-495D-AD80-39520DE63E93}" = e-SPT Masa 21-26 2014
"{A5C0BFEA-E59D-4245-A970-81BC16232221}" = SAP Crystal Reports runtime engine for .NET Framework (32-bit)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-0804-1033-1959-001824161310}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.13)
"{B6F5C6D8-C443-4B55-932F-AE11B5743FC4}" = HP Officejet Pro 8600 Help
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}" = Bing Bar
"{D6E36A4E-7774-42AC-B1CF-BEA10C74B767}" = e-SPT PPN 1111
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"ACCURATE 4 Enterprise" = ACCURATE 4 Enterprise
"ACCURATE 4 Standard" = ACCURATE 4 Standard
"Adobe Flash Player ActiveX" = Adobe Flash Player 19 ActiveX
"Adobe Flash Player NPAPI" = Adobe Flash Player 19 NPAPI
"Attendance Management_is1" = Attendance Management
"BlueStacks App Player" = BlueStacks App Player
"Comodo Dragon" = Comodo Dragon
"Defraggler" = Defraggler (remove only)
"EPSON Scanner" = EPSON Scan
"Fingerprint Reader Driver_is1" = Fingerprint Reader Driver 2.3.3.1
"Google Chrome" = Google Chrome
"InstallShield_{263B71A8-BE92-43FE-B70F-20A99C9635D1}" = MYOB Premier v11
"InstallShield_{4AD7370B-0DD2-430C-8640-E7E473FFD695}" = MYOB ODBC Direct v7
"InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193}" = Acer Crystal Eye Webcam
"L210 Series Useg" = Epson User's Guide L210 Series
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware version 2.2.0.1024
"Mobogenie" = Mobogenie
"Mozilla Firefox 42.0 (x86 en-US)" = Mozilla Firefox 42.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MyEpson Portal" = MyEpson Portal
"NIS" = Norton Internet Security
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"PDF Password Remover v3.1_is1" = PDF Password Remover v3.1
"TeamViewer 8" = TeamViewer 8
"VPN Client" = VPN Client
"Yahoo! Messenger" = Yahoo! Messenger

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox

[color=#E56717]========== Last 20 Event Log Errors ==========[/color]

[ Application Events ]
Error - 24/11/2015 19:34:29 | Computer Name = Wydia-PC | Source = BstHdAndroidSvc | ID = 0
Description = Service cannot be started. System.ApplicationException: Cannot start
 service.  Service did not stop gracefully the last time it was run.     at BlueStacks.hyperDroid.Service.Service.OnStart(String[]
 args)     at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error - 25/11/2015 1:55:47 | Computer Name = Wydia-PC | Source = System Restore | ID = 8193
Description =

Error - 25/11/2015 3:38:41 | Computer Name = Wydia-PC | Source = Application Error | ID = 1000
Description = Faulting application name: DllHost.exe, version: 6.1.7600.16385, time
 stamp: 0x4a5bc6b7  Faulting module name: ntdll.dll, version: 6.1.7601.19045, time
 stamp: 0x56258e62  Exception code: 0xc0000005  Fault offset: 0x00022312  Faulting process
 id: 0x16a2c  Faulting application start time: 0x01d12752dbf0e11b  Faulting application
 path: C:\Windows\SysWOW64\DllHost.exe  Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
 Id: 8c3fb317-9347-11e5-b0a4-08edb923ab1a

Error - 26/11/2015 3:27:43 | Computer Name = Wydia-PC | Source = BstHdAndroidSvc | ID = 0
Description = Service cannot be started. System.ApplicationException: Cannot start
 service.  Service did not stop gracefully the last time it was run.     at BlueStacks.hyperDroid.Service.Service.OnStart(String[]
 args)     at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error - 26/11/2015 4:38:45 | Computer Name = Wydia-PC | Source = Application Hang | ID = 1002
Description = The program EXCEL.EXE version 14.0.4734.1000 stopped interacting with
 Windows and was closed. To see if more information about the problem is available,
 check the problem history in the Action Center control panel.    Process ID: efac    Start
 Time: 01d12825b9953544    Termination Time: 32    Application Path: C:\Program Files (x86)\Microsoft
 Office\Office14\EXCEL.EXE    Report Id: 0d51b653-9419-11e5-a35a-08edb923ab1a

Error - 26/11/2015 20:17:48 | Computer Name = Wydia-PC | Source = BstHdAndroidSvc | ID = 0
Description = Service cannot be started. System.ApplicationException: Cannot start
 service.  Service did not stop gracefully the last time it was run.     at BlueStacks.hyperDroid.Service.Service.OnStart(String[]
 args)     at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error - 27/11/2015 1:25:36 | Computer Name = Wydia-PC | Source = Application Error | ID = 1000
Description = Faulting application name: DllHost.exe, version: 6.1.7600.16385, time
 stamp: 0x4a5bc6b7  Faulting module name: ntdll.dll, version: 6.1.7601.19045, time
 stamp: 0x56258e62  Exception code: 0xc0000005  Fault offset: 0x00022312  Faulting process
 id: 0x4d0fc  Faulting application start time: 0x01d128ca6a5aace6  Faulting application
 path: C:\Windows\SysWOW64\DllHost.exe  Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
 Id: 49352094-94c7-11e5-b9b6-08edb923ab1a

Error - 29/11/2015 21:27:35 | Computer Name = Wydia-PC | Source = BstHdAndroidSvc | ID = 0
Description = Service cannot be started. System.ApplicationException: Cannot start
 service.  Service did not stop gracefully the last time it was run.     at BlueStacks.hyperDroid.Service.Service.OnStart(String[]
 args)     at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error - 29/11/2015 21:27:51 | Computer Name = Wydia-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Explorer.EXE, version: 6.1.7601.17567,
time stamp: 0x4d672ee4  Faulting module name: wwanapi.dll, version: 6.1.7600.16385,
 time stamp: 0x4a5be0a8  Exception code: 0xc0000005  Fault offset: 0x00000000000333eb
Faulting
 process id: 0xd40  Faulting application start time: 0x01d12b0e1a9a434a  Faulting application
 path: C:\Windows\Explorer.EXE  Faulting module path: C:\Windows\system32\wwanapi.dll
Report
 Id: 91c53f6b-9701-11e5-b9a7-08edb923ab1a

Error - 29/11/2015 23:55:05 | Computer Name = Wydia-PC | Source = BstHdAndroidSvc | ID = 0
Description = Service cannot be started. System.ApplicationException: Cannot start
 service.  Service did not stop gracefully the last time it was run.     at BlueStacks.hyperDroid.Service.Service.OnStart(String[]
 args)     at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

[ System Events ]
Error - 29/11/2015 21:27:34 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7022
Description = The BlueStacks Android Service service hung on starting.

Error - 29/11/2015 21:27:35 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7023
Description = The BlueStacks Android Service service terminated with the following
 error:   %%1064

Error - 29/11/2015 21:28:31 | Computer Name = Wydia-PC | Source = DCOM | ID = 10010
Description =

Error - 29/11/2015 22:02:15 | Computer Name = Wydia-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
 will not be used. The driver has been unloaded.

Error - 29/11/2015 22:20:33 | Computer Name = Wydia-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
 will not be used. The driver has been unloaded.

Error - 29/11/2015 23:52:51 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the TeamViewer
 8 service to connect.

Error - 29/11/2015 23:52:51 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7000
Description = The TeamViewer 8 service failed to start due to the following error:
   %%1053

Error - 29/11/2015 23:54:32 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7022
Description = The BlueStacks Android Service service hung on starting.

Error - 29/11/2015 23:55:05 | Computer Name = Wydia-PC | Source = Service Control Manager | ID = 7023
Description = The BlueStacks Android Service service terminated with the following
 error:   %%1064

Error - 30/11/2015 1:47:18 | Computer Name = Wydia-PC | Source = BTHUSB | ID = 327697
Description = The local Bluetooth adapter has failed in an undetermined manner and
 will not be used. The driver has been unloaded.

[ VPN Client Events ]
Error - 25/11/2015 23:02:14 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CTlsTransport::OnTransportInitiateComplete File: .\IP\TlsTransport.cpp
Line:
 371 Invoked Function: ISocketTransportCB::OnTransportInitiateComplete Return Code:
 -31588316 (0xFE1E0024) Description: SOCKETTRANSPORT_ERROR_CONNECT_TIMEOUT

Error - 25/11/2015 23:02:14 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CHttpProbeAsync::OnOpenRequestComplete File: .\IP\HttpProbeAsync.cpp
Line:
 303 Invoked Function: CHttpSessionAsync::OnOpenRequestComplete Return Code: -31588316
 (0xFE1E0024) Description: SOCKETTRANSPORT_ERROR_CONNECT_TIMEOUT

Error - 25/11/2015 23:02:14 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CSocketTransport::OnTimerExpired File: .\IPC\SocketTransport.cpp
Line:
 1655 Invoked Function: CSocketTransport::postConnectProcessing Return Code: -31588316
 (0xFE1E0024) Description: SOCKETTRANSPORT_ERROR_CONNECT_TIMEOUT

Error - 25/11/2015 23:02:22 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CHttpProbeAsync::OnOpenRequestComplete File: .\IP\HttpProbeAsync.cpp
Line:
 303 Invoked Function: CHttpSessionAsync::OnOpenRequestComplete Return Code: -31588316
 (0xFE1E0024) Description: SOCKETTRANSPORT_ERROR_CONNECT_TIMEOUT

Error - 25/11/2015 23:02:22 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CSocketTransport::OnTimerExpired File: .\IPC\SocketTransport.cpp
Line:
 1655 Invoked Function: CSocketTransport::postConnectProcessing Return Code: -31588316
 (0xFE1E0024) Description: SOCKETTRANSPORT_ERROR_CONNECT_TIMEOUT

Error - 25/11/2015 23:02:22 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CNetEnvironment::TestAccessToSG File: .\NetEnvironment.cpp
Line:
 1380 Invoked Function: CNetEnvironment::analyzeHttpResponse Return Code: -28966899
 (0xFE46000D) Description: NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could
 not contact target

Error - 25/11/2015 23:02:22 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CNetEnvironment::testNetwork File: .\NetEnvironment.cpp Line:
 772 Invoked Function: CNetEnvironment::IsSGAccessible Return Code: -28966899 (0xFE46000D)
Description:
 NETENVIRONMENT_ERROR_PROBE_INCOMPLETE:Network Probe could not contact target

Error - 25/11/2015 23:02:53 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CHostConfigMgr::determinePublicAddrCandidateFromDefRoute
File:
 .\HostConfigMgr.cpp Line: 1766 Invoked Function: CHostConfigMgr::FindDefaultRouteInterface
Return
 Code: -24117215 (0xFE900021) Description: ROUTETABLE_ERROR_GETBESTROUTE_FAILED

Error - 25/11/2015 23:04:59 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CHostConfigMgr::determinePublicAddrCandidateFromDefRoute
File:
 .\HostConfigMgr.cpp Line: 1766 Invoked Function: CHostConfigMgr::FindDefaultRouteInterface
Return
 Code: -24117215 (0xFE900021) Description: ROUTETABLE_ERROR_GETBESTROUTE_FAILED

Error - 25/11/2015 23:04:59 | Computer Name = Wydia-PC | Source = acvpnapi | ID = 67108866
Description = Function: CHostConfigMgr::determinePublicAddrCandidateFromDefRoute
File:
 .\HostConfigMgr.cpp Line: 1766 Invoked Function: CHostConfigMgr::FindDefaultRouteInterface
Return
 Code: -24117215 (0xFE900021) Description: ROUTETABLE_ERROR_GETBESTROUTE_FAILED


< End of report >