|
\$NtUninstallKB963027$\spuninst\spuninst.exe"
SpywareGuard v2.2-->"C:\Program Files\SpywareGuard\unins000.exe"
Starcraft-->C:\WINDOWS\SCunin.exe C:\WINDOWS\SCunin.dat
Steam-->MsiExec.exe /X{048298C9-A4D3-490B-9FF9-AB023A9238F3}
Update for Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spunin st.exe"
Update for Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spunin st.exe"
Update for Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spunin st.exe"
VC80CRTRedist - 8.0.50727.762-->MsiExec.exe /I{767CC44C-9BBC-438D-BAD3-FD4595DD148B}
Ventrilo Client-->MsiExec.exe /I{789289CA-F73A-4A16-A331-54D498CE069F}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spu ninst.exe"
World of Warcraft-->C:\Program Files\Common Files\Blizzard Entertainment\World of Warcraft\Uninstall.exe
======Security center information======
AV: AVG Internet Security
======System event log======
Computer Name: BADASS
Event Code: 15
Message: The device, \Device\CdRom1, is not ready for access yet.
Record Number: 10249
Source Name: Cdrom
Time Written: 20090811221851.000000-420
Event Type: error
User:
Computer Name: BADASS
Event Code: 15
Message: The device, \Device\CdRom0, is not ready for access yet.
Record Number: 10248
Source Name: Cdrom
Time Written: 20090811221851.000000-420
Event Type: error
User:
Computer Name: BADASS
Event Code: 15
Message: The device, \Device\CdRom1, is not ready for access yet.
Record Number: 10247
Source Name: Cdrom
Time Written: 20090811221850.000000-420
Event Type: error
User:
Computer Name: BADASS
Event Code: 15
Message: The device, \Device\CdRom0, is not ready for access yet.
Record Number: 10246
Source Name: Cdrom
Time Written: 20090811221849.000000-420
Event Type: error
User:
Computer Name: BADASS
Event Code: 15
Message: The device, \Device\CdRom1, is not ready for access yet.
Record Number: 10245
Source Name: Cdrom
Time Written: 20090811221849.000000-420
Event Type: error
User:
=====Application event log=====
Computer Name: BADASS
Event Code: 5603
Message: A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.
Record Number: 200
Source Name: WinMgmt
Time Written: 20090425102602.000000-420
Event Type: warning
User: NT AUTHORITY\SYSTEM
Computer Name: BADASS
Event Code: 1005
Message: Your Windows product has not been activated with Microsoft yet. Please use the Product Activation Wizard within 30 days.
Record Number: 196
Source Name: Windows Product Activation
Time Written: 20090425102533.000000-420
Event Type: warning
User:
Computer Name: BADASS
Event Code: 63
Message: A provider, HiPerfCooker_v1, has been registered in the WMI namespace, Root\WMI, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Record Number: 195
Source Name: WinMgmt
Time Written: 20090425102019.000000-420
Event Type: warning
User: BADASS\Tyler
Computer Name: BADASS
Event Code: 1005
Message: Your Windows product has not been activated with Microsoft yet. Please use the Product Activation Wizard within 27 days.
Record Number: 145
Source Name: Windows Product Activation
Time Written: 20090420010051.000000-420
Event Type: warning
User:
Computer Name: BADASS
Event Code: 1517
Message: Windows saved user BADASS\Tyler registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Record Number: 140
Source Name: Userenv
Time Written: 20090419102119.000000-420
Event Type: warning
User: NT AUTHORITY\SYSTEM
======Environment variables======
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemR oot%\System32\Wbem;C:\Program Files\Common Files\DivX Shared\;C:\Program Files\QuickTime\QTSystem\
"windir"=%SystemRoot%
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"NUMBER_OF_PROCESSORS"=2
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;. WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"CLASSPATH"=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Program Files\QuickTime\QTSystem\QTJava.zip
-----------------EOF-----------------
|