OTL Extras logfile created on: 10.09.2013 03:52:19 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Evrani\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 0000041f | Country: Türkiye | Language: TRK | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 2,01 Gb Available Physical Memory | 50,27% Memory free 18,64 Gb Paging File | 16,34 Gb Available in Paging File | 87,65% Paging File free Paging file location(s): c:\pagefile.sys 15000 20000 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 540,79 Gb Total Space | 194,64 Gb Free Space | 35,99% Space Free | Partition Type: NTFS Drive D: | 390,62 Gb Total Space | 62,71 Gb Free Space | 16,05% Space Free | Partition Type: NTFS Computer Name: EVRANI-PC | User Name: Evrani | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (SafeList) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .hlp[@ = WinHelpCustomView.Scenario] -- Reg Error: Key error. File not found .html[@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .hlp [@ = WinHelpCustomView.Scenario] -- Reg Error: Key error. File not found .html [@ = ChromeHTML] -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) [HKEY_USERS\S-1-5-21-969899708-634147422-4128253439-1000\SOFTWARE\Classes\] .html [@ = ChromeHTML] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htafile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [Digital Photo Professional] -- C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [Winamp.Bookmark] -- "C:\Program Files (x86)\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.) Directory [Winamp.Enqueue] -- "C:\Program Files (x86)\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.) Directory [Winamp.Play] -- "C:\Program Files (x86)\Winamp\winamp.exe" "%1" (Nullsoft, Inc.) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 "FirewallDisableNotify" = 0 "AntiVirusDisableNotify" = 0 "UpdatesDisableNotify" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== System Restore Settings ==========[/color] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [color=#E56717]========== Firewall Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 0 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{00235C56-44C4-4EF8-A5C2-DD174C92ECFC}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{012A3F7A-B177-4B41-9F94-D42E7096039B}" = lport=4481 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer | "{16D0A8FF-349A-4D74-AEEB-263663531E09}" = lport=8390 | protocol=17 | dir=in | name=league of legends game client | "{1B677828-502F-426C-A623-DDEEB4499EF2}" = lport=4482 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery | "{22541DC8-F400-4ADC-89B4-21B713714996}" = lport=8393 | protocol=17 | dir=in | name=league of legends lobby | "{237C1F67-DE30-4031-AECE-84A8F6E7C886}" = lport=4481 | protocol=17 | dir=in | name=blackberry desktop software wireless music sync discovery | "{248898BD-6937-4DB3-90A3-DF31F5638413}" = lport=445 | protocol=6 | dir=in | app=system | "{30FB1336-C819-4615-BCAC-1F024879F071}" = lport=137 | protocol=17 | dir=in | app=system | "{315D1D2E-56C6-4B94-B82E-B84C367D323F}" = lport=139 | protocol=6 | dir=in | app=system | "{394E3843-B28A-405C-ABC9-C76CBFC513D7}" = lport=8396 | protocol=17 | dir=in | name=league of legends launcher | "{4EE46B5C-C9B1-4EBB-B9E7-B21303997BCE}" = lport=138 | protocol=17 | dir=in | app=system | "{5A70A5F6-2DF7-404C-94D3-ABD89FB317A2}" = rport=445 | protocol=6 | dir=out | app=system | "{5EA8FD39-569E-4C17-AAA3-D0C7FFAF92E0}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{7016A579-5AF6-443D-939B-B79681F4B544}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{72B43D7D-3830-464B-AC1A-2117F58479B8}" = lport=8390 | protocol=6 | dir=in | name=league of legends game client | "{73E6E4A3-6746-47C7-AF4D-1FBEBEC670E7}" = lport=8393 | protocol=6 | dir=in | name=league of legends lobby | "{86708239-3890-4832-9479-DA7F81FCCA41}" = lport=2869 | protocol=6 | dir=in | app=system | "{98B60A56-7B43-4CD2-8219-562150E24118}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\outlook.exe | "{9C7B8F93-1E7B-4FFB-859A-F7C8BA37F538}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{9DCE0630-F1B1-4477-9E9D-92560A0EFE10}" = lport=4482 | protocol=6 | dir=in | name=blackberry desktop software wireless music sync data transfer | "{A2AC8CAD-6EE0-4C1E-80E6-55EC48AAE8B9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | "{A638B330-2BCF-4C5C-828F-457FD372F6F9}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{AC4CB06D-0C18-4451-BC0D-240F60DE7AD5}" = rport=137 | protocol=17 | dir=out | app=system | "{ACA69926-AF43-455E-B6EC-385195C3AFD2}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{B87DBBEB-794B-4801-8AE5-45C9F9D68C20}" = lport=6954 | protocol=17 | dir=in | name=league of legends launcher | "{C5366431-A1F5-471E-A859-9120D404A0D5}" = lport=6954 | protocol=6 | dir=in | name=league of legends launcher | "{CDC54982-1130-4B4F-ACF8-7BCBBBBEDBF1}" = lport=8396 | protocol=6 | dir=in | name=league of legends launcher | "{D0226387-B8F0-4D9D-8A09-24B62364FFFE}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{D732C3E8-CE25-4A44-A306-C9F20BB01E41}" = rport=138 | protocol=17 | dir=out | app=system | "{E3E8938E-C1E0-459F-9BCB-4F6C510230FC}" = rport=139 | protocol=6 | dir=out | app=system | "{F4306DE7-EE29-43AF-B1C2-6A740EB5CD91}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03D17F08-D9AC-4FA7-A08A-6A79D56A0DB2}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{05A3C19F-2C98-46D8-9C94-C62ECEA328A0}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{0CA4C01C-CF3D-42B2-81F4-96989A2BA161}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{0DA2E34D-9E01-433B-AEE8-C68CC5D3AFBC}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\age of empires iii\age3x.exe | "{0E09D1B0-A3F5-4D7A-A7E8-3603D5AEAD03}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | "{0E0D69D7-E94F-4BDE-9996-1B01F084084C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{0EED6655-908E-4520-B6B2-C02FF3232E64}" = protocol=6 | dir=in | app=c:\program files (x86)\capcom\street fighter x tekken\sftk.exe | "{1053A3F5-098C-4971-86A5-31CD0DEA831D}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{10C83A39-643D-4BB1-86F4-7F001E8FE231}" = protocol=17 | dir=in | app=c:\windows\system32\lxbkcoms.exe | "{179CB06B-419F-408D-9430-361BD2C01FDC}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{1996EF07-BA29-4E55-A5D0-8357C5E350A0}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{19C8250E-67D8-4D87-A7AE-F9B4BC1C90C5}" = protocol=6 | dir=in | app=c:\program files\vuze\azureus.exe | "{1E249E65-D910-4B42-8558-61B1AFA49368}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{232F3FB7-22E2-45D5-9477-496EE4CE87A4}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office14\groove.exe | "{28272D05-BE31-4A33-9219-E61568A17263}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{2DC9DBE1-3222-4B3D-A078-A4E73BE5B907}" = protocol=17 | dir=in | app=c:\program files (x86)\2k games\bioshock 2\sp\builds\binaries\bioshock2.exe | "{344C5743-4A9B-4D05-8B34-57336C24E1C4}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{4214EF1A-9F5D-43B6-B7E1-04807B268FF3}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{4562C4EC-558C-4713-8792-317BE6095C5D}" = protocol=6 | dir=in | app=c:\program files (x86)\research in motion\blackberry desktop\rim.desktop.exe | "{4BD64F5D-B76B-410A-994E-17EC28FD9791}" = protocol=17 | dir=in | app=c:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe | "{5BAC3AC1-D8FD-45DA-92E3-4E4A17A44E6F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{5E8FF832-B178-468D-87FE-A4E2B471A4BF}" = protocol=6 | dir=in | app=c:\programdata\esafe\egdpsvc.exe | "{5EAE4E70-1F03-4D0A-86EA-3FCEC6C4E94A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{612817E3-E5E1-41A8-8F26-82A18E20E311}" = protocol=17 | dir=in | app=c:\windows\syswow64\lxbkcoms.exe | "{616FEE38-444C-4A99-8BE3-69019448B008}" = protocol=6 | dir=in | app=c:\program files (x86)\activision\x-men origins - wolverine(tm)\binaries\wolverine.exe | "{6CA96875-618A-44DA-94A4-45005DEB13E1}" = protocol=6 | dir=in | app=c:\program files (x86)\2k games\bioshock 2\mp\builds\binaries\bioshock2.exe | "{6D4924C7-5289-4D9E-989E-DA4B6D0A4CAC}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | "{6D6F5DA1-8C8C-46AA-8AEC-946E869505B4}" = protocol=17 | dir=in | app=c:\program files (x86)\logitech\vid hd\vid.exe | "{75D44D2C-5D25-49EE-8D7E-013EB6E37B18}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office14\onenote.exe | "{77A8A4A3-F35B-4580-9F2C-82B2018253DE}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{796E996E-5AB0-4F82-B974-2F3314896A06}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe | "{7CCB34F3-27F1-4E2E-BF1F-C29C6CDB1FF7}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{7CE0DE5E-7BCF-4259-A5BC-E2B4AB8B0242}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{7CED8E21-7615-4711-8BF0-B8CC554AF98E}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{815C38A1-1609-4961-A44D-955F2DB25574}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{8C0BDD5B-BD47-43B6-B590-F0779CD12007}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{8F341F0A-852C-4D29-9B4A-02785BE70B08}" = protocol=6 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe | "{8F418229-29C5-4E1D-B0E5-59A78D7ED65A}" = protocol=6 | dir=in | app=c:\windows\system32\lxbkcoms.exe | "{8F6ADD25-B83C-4198-88F0-EFC224902ED6}" = protocol=17 | dir=in | app=c:\program files\vuze\azureus.exe | "{94A4C63A-BC3E-4657-BEA0-D4937AA0D8E8}" = protocol=17 | dir=in | app=c:\program files (x86)\activision\x-men origins - wolverine(tm)\binaries\wolverine.exe | "{96C26527-18CA-4C2A-9BF0-30BB118AA13A}" = protocol=6 | dir=in | app=c:\windows\syswow64\lxbkcoms.exe | "{9A69F290-F9CD-4B64-92F8-FB22C3B3C498}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe | "{A0066429-C8CC-422B-80A1-4C6A0D32113B}" = protocol=17 | dir=in | app=c:\program files (x86)\research in motion\blackberry desktop\rim.desktop.exe | "{A4075CCC-481C-439F-9C31-3A638F09B431}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\raceroom racing experience\rrrelauncher.exe | "{A7D8B8E4-D5E5-422E-BBAE-F4CF1402E239}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | "{AF60E688-802F-4805-A7F0-3AC97A230EB7}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{B0E1852F-CE05-4687-B08B-42F474F9FC72}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{B3C6F6B6-D8E9-4495-8BB5-A1D3D0678BF7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{B501AB8C-938F-4EFB-AAD9-9C8F503D51DA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | "{B76F4442-5035-4AB6-BEA4-8876E20EF201}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe | "{B7D14BF3-58F7-4337-A395-4DF1DDB330DF}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\age of empires iii\age3x.exe | "{BE06E710-FE99-41BD-B976-6904F69FFAB6}" = protocol=6 | dir=in | app=c:\program files (x86)\codemasters\f1 2011\f1_2011.exe | "{CAD1879D-8876-4316-A144-4F4D234C779C}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | "{CC38BDB7-0434-4308-9E40-ED66D77A4B3D}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{CF6661D6-842D-4D6A-B417-F8EF8508F291}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | "{D6C0E911-5B22-438B-B433-DC8BA5078E45}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{D842D8B9-772C-4CEE-8C54-DC90741B2D7E}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft games\age of empires iii\age3y.exe | "{D9F28CF0-2361-4DF4-93DB-6FA471BF1721}" = protocol=6 | dir=in | app=c:\program files (x86)\2k games\bioshock 2\sp\builds\binaries\bioshock2.exe | "{DAF5960A-FA84-4928-BDE3-4EAF609EE3DE}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft games\age of empires iii\age3y.exe | "{DB7074DC-0E7B-4202-A31F-AF91804E3A22}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | "{E4ED40A8-E08D-41B5-B07D-281EDAA3E3A1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\raceroom racing experience\rrrelauncher.exe | "{E52F64B1-F881-4C51-B23A-749D4A49AB4A}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "{EE22594A-76E0-4656-8A3C-C6B025964C38}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{EE433B90-2991-499B-8FEB-CE1C2EA36239}" = protocol=17 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe | "{F439D907-AFF1-45A1-88A2-802A73CE68FF}" = protocol=17 | dir=in | app=c:\program files (x86)\bittorrent\bittorrent.exe | "{F5DC3222-232D-4AA3-8E8F-AC3C069AEC01}" = protocol=17 | dir=in | app=c:\program files (x86)\codemasters\f1 2011\f1_2011.exe | "{F61958C3-8C13-430F-AB34-DF32A93BF502}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | "{F86943A5-CB4B-4B9A-BC76-1DAB0C5F665A}" = protocol=17 | dir=in | app=c:\program files (x86)\capcom\street fighter x tekken\sftk.exe | "{F9D491E5-073B-4B0C-A3B3-F292392A5241}" = protocol=6 | dir=in | app=c:\program files (x86)\pandora.tv\panservice\pandoraservice.exe | "{FA4495B9-0B66-4151-B044-26FE967A84E3}" = protocol=6 | dir=in | app=c:\program files (x86)\logitech\vid hd\vid.exe | "{FC6D0B50-FC68-44D1-819E-43080D5921D9}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | "{FE22A156-D8B0-422B-87B2-FE50B79EAC97}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{FFAD613B-53AD-4384-BA75-199D3DC6264D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | "TCP Query User{1D3E170D-27D5-4E76-A81B-AA9D857CB5A0}C:\program files (x86)\fifa 12\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files (x86)\fifa 12\game\fifa.exe | "TCP Query User{38901261-7484-467A-8CE0-F5758483CF9C}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe" = protocol=6 | dir=in | app=c:\program files (x86)\dishonored\binaries\win32\dishonored.exe | "TCP Query User{3B16B597-63AF-4C58-82E6-5AE68CB63B5E}C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=6 | dir=in | app=c:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe | "TCP Query User{59C19AF6-6FEA-431A-AF4C-27D2AFB2D3C1}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "TCP Query User{6FE8A752-4E60-4CB4-8ABA-430EF021DBC1}C:\program files (x86)\lolreplay\lolreplay.exe" = protocol=6 | dir=in | app=c:\program files (x86)\lolreplay\lolreplay.exe | "TCP Query User{970A0391-7521-4E75-923E-D784BF27C6F7}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "TCP Query User{AE9336CD-C947-4CBB-A4C5-1B4C4AE2FF30}C:\program files (x86)\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "TCP Query User{DA50F558-302A-4213-B890-8C01E9054B89}C:\program files (x86)\ares\ares.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{2A4AB041-C680-44B7-AA21-5C700007AF4D}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | "UDP Query User{39720B12-2F66-4441-97AF-E97B2DF685B9}C:\program files (x86)\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files (x86)\winamp\winamp.exe | "UDP Query User{51D3413E-2D75-4B63-82E8-490BBA161E1B}C:\program files (x86)\lolreplay\lolreplay.exe" = protocol=17 | dir=in | app=c:\program files (x86)\lolreplay\lolreplay.exe | "UDP Query User{79931CAD-BDAB-44C0-AB10-AA771B4D717A}C:\program files (x86)\fifa 12\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files (x86)\fifa 12\game\fifa.exe | "UDP Query User{A3842A86-73EA-4D1A-AC51-AA1C9479DB40}C:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe" = protocol=17 | dir=in | app=c:\program files (x86)\firefly studios\stronghold 3\bin\win32_release\stronghold3.exe | "UDP Query User{CEE39689-3C4F-4CFF-A1CF-183989BF9DD8}C:\program files (x86)\dishonored\binaries\win32\dishonored.exe" = protocol=17 | dir=in | app=c:\program files (x86)\dishonored\binaries\win32\dishonored.exe | "UDP Query User{ECB62AD2-44AB-421F-B668-DD1E9678B0F4}C:\program files (x86)\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "UDP Query User{ED764A27-FC66-45A5-814D-50D39A7DBDC0}C:\program files (x86)\ares\ares.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ares\ares.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector "{138A4072-9E64-46BD-B5F9-DB2BB395391F}" = LWS VideoEffects "{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant "{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 "{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64 "{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1" = MotioninJoy DS3 driver version 0.6.0004 "{40D70C5F-A748-0848-0696-BD8901BB3C2B}" = AMD Drag and Drop Transcoding "{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{4BDE7544-0A08-4AD9-8A8F-4B7944471C36}" = iTunes "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{55B348BE-A3BE-9AE7-58BD-BE45B9A28F82}" = AMD Media Foundation Decoders "{5B73E1AA-CA9D-E76A-2F2D-E0EFB41CE087}" = AMD Accelerated Video Transcoding "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64 "{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 1.10.02 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010 "{90140000-002A-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (English) 2010 "{90140000-0116-0409-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 "{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64 "{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{9A109BCE-6CC8-7AF4-EF13-E5EC6BACFFA5}" = ATI AVIVO64 Codecs "{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64 "{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64 "{ADE357A9-1514-A3CB-2053-EFAC5B6698C0}" = ATI Problem Report Wizard "{AEC9311A-90AC-4083-B3CD-428C3BB3891C}" = Magic Bullet Looks "{B71CCF77-38A2-4805-9759-A6F7D2C52F3A}" = Adobe Photoshop Lightroom 4.2 64-bit "{B8AD779A-82DA-4365-A7D0-AD3DCFC55CFF}" = Apple Mobile Device Support "{C8807716-1F6F-5C43-3C32-7295A45CF060}" = AMD Catalyst Install Manager "{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64 "{C9608300-11F5-11E0-A64B-0013D3D69929}" = MSVCRT Redists "{CC1FE395-D90F-712C-E013-EBDCC30433B1}" = AMD Fuel "{DA2737A4-B639-96F4-1CC2-30D2919EE1FB}" = AMD Steady Video Plug-In "{E54A949B-C4AE-28B6-EC97-FCB9E402D338}" = ccc-utility64 "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F" = Windows Driver Package - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) "72A50F48CC5601190B9C4E74D81161693133E7F7" = Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) "8461-7759-5462-8226" = Vuze "CCleaner" = CCleaner "E0AC723A3DE3A04256288CADBBB011B112AED454" = Windows Driver Package - Nokia Modem (02/25/2011 4.7) "Lexmark X1100 Series" = Lexmark X1100 Series "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "OptimizerPro" = OptimizerPro [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{01db25f3-1b76-4d97-88c8-1c90634d88fb}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 "{024521CF-C07E-4F8E-8481-0D75695E03AF}" = PxMergeModule "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86 "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{0497EAED-70DA-4BBE-BEB3-AF77FD8788EA}" = Adobe Premiere Pro CS5.5 "{052bac4a-6f79-46d4-a024-1ce1b4f73cd4}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.58299 False "{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86 "{11F2C5EC-35AA-7237-B62B-A4F041859C2A}" = CCC Help Spanish "{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar "{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi "{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5 "{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main "{174A3B31-4C43-43DD-866F-73C9DB887B48}" = LWS Twitter "{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 Redistributable - x86 10.0.30319 False "{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 False "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin "{229EDE35-4677-BDE6-70ED-A5A4C711DDC3}" = CCC Help Norwegian "{2470F2F2-8491-5A0B-B8F5-8B72A8D74597}" = Catalyst Control Center InstallProxy "{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25 "{27B56E28-94B2-BDF8-D209-EC8D2FF4838E}" = Catalyst Control Center Graphics Previews Common "{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger "{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 False "{33D4FA83-02C0-93B3-08ED-5D7378930CFA}" = CCC Help Turkish "{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help "{37D0F3C2-8FFD-134D-FBDF-2D711E169D78}" = AMD VISION Engine Control Center "{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT "{42FECCEF-63CD-DF98-D6BC-DDBB27E4A580}" = CCC Help Japanese "{43430FA5-AF68-4A2D-A7D4-891000008200}" = Street Fighter X Tekken "{434D0FA1-3E0C-4D03-A5D4-5E1000008100}" = F1 2011 "{443B561F-DE1B-4DEF-ADD9-484B684653C7}" = Windows Live Messenger "{46594DA4-2D0A-B2D4-C0E0-A5CCA3260025}" = CCC Help Hungarian "{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR "{46ED2B64-85C7-4E1F-920C-A555B21F2E4C}" = NVIDIA PhysX "{485B8152-C59F-8569-15BC-46BDA2A1E4A9}" = CCC Help Polish "{490F47E6-585C-531A-1BF8-4DE44ED9AED7}" = CCC Help Russian "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A8B461A-9336-4CF9-98F4-14DD38E673F0}" = BioShock 2 "{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace "{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6 "{50F87176-7DB3-4C75-D9DC-25CB4561D0F8}" = CCC Help Danish "{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack "{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 False "{52E706AA-B4E9-423A-1651-62E61E06DF9A}" = CCC Help Greek "{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "{5464A359-E1F9-4256-A56E-DAA0253D8765}" = FastPictureViewer Codec Pack 3.2.0.58 TRIAL EDITION "{54B7A3C7-0940-4C16-A509-FC3C3758D22A}_is1" = Amnesia - The Dark Descent "{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack "{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 False "{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 False "{5FB51C12-62AE-0990-E419-C6F62B776E5C}" = CCC Help Portuguese "{615bc16d-60f5-482e-91b3-b51d8130963b}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 False "{628C3D50-F524-4C49-A958-672CE7953756}" = The Lord of the Rings - Conquest™ "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86 "{644F4910-E812-49AD-93EC-86828CB81A0D}" = PC Connectivity Solution "{66B46617-A156-F25B-3CC0-5E46343AEA95}" = CCC Help Thai "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 False "{6c95b50e-cb5a-4a1f-a7b4-8a6004f8dd6a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 False "{6D592E30-11EC-11E0-859C-0013D3D69929}" = Vegas Pro 10.0 "{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery "{7032B400-11EC-11E0-A9BF-0013D3D69929}" = MSVCRT Redists "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK "{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.56336 False "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{789F2730-EE40-11E2-8DDE-1040F3E7010F}" = MSVCRT Redists "{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = Activision(R) "{81543139-18AE-703B-D3B1-F6B3A0CB2EAC}" = CCC Help English "{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.59193 False "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher "{847C6940-D852-11E2-81D2-F04DA23A5C58}" = Noise Reduction Plug-In 2.0 "{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common "{866C4563-ED53-43F3-A29D-8BEE2BD1BA3C}" = Nokia PC Suite "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.5570 False "{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = KMPlayer Toolbar "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8FA20FAC-719F-7CCD-5790-6B59D691C370}" = CCC Help Chinese Traditional "{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010 "{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010 "{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010 "{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010 "{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010 "{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010 "{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010 "{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010 "{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010 "{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010 "{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010 "{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010 "{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010 "{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010 "{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010 "{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010 "{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010 "{918A9082-6287-4D25-9002-5E5D5E4971CB}" = League of Legends "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{940B28E7-320B-5AC8-0A8A-32D6A7B404A1}" = CCC Help Swedish "{95140000-0081-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector "{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X "{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth "{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver "{990C7C7E-7E53-49A1-9766-5369E17892BB}" = Nokia PC Internet Access "{99C382AB-CA1D-8577-66D3-AA850DB5FD00}" = CCC Help Korean "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 False "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C2AC00C-0C06-4B7E-97A4-A833808D54D6}" = EPU "{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin "{9E46390F-3AAF-4FDB-90D2-F6282F188E76}_is1" = Victoria 2:Heart of darkness version 3.01 "{9F60FF4E-725D-4B28-0094-FDADF5E73647}" = NBA Live 2003 "{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.51011 False "{A325E12D-09FA-4FA3-813B-A4D456E77460}" = CMS "{A376BDE2-EE3D-11E2-AA13-F04DA23A5C58}" = Sound Forge Pro 11.0 "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable - x86 8.0.50727.42 False "{A57025CC-5F2E-4D01-B387-06DB10500D43}" = Nokia Connectivity Cable Driver "{A68C4D16-8046-5333-CB64-5E622C795785}" = CCC Help Dutch "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5 "{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}" = Hitman Blood Money "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.6) "{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86 "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86 "{B810D852-DFD6-HIT3A-89A5-CC4D47756DAF}_is1" = Hitman Absolution version 5.1 "{BE0B654E-FC60-40AE-F60B-06526508B5FD}" = CCC Help Italian "{BE0E1491-B2DC-6447-217C-342D8F7100EA}" = CCC Help Czech "{BE5B0450-DCCB-4FE9-93E2-3B38D88A745B}" = BlackBerry Desktop Software 7.1 "{C28DD992-5B7B-D195-6841-4EC57DF512BD}" = Adobe Story "{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties "{C5EADF55-3B49-B545-E16F-402B443DDC77}" = CCC Help German "{CBDFF724-E925-2964-E647-0A83D2F9165C}" = CCC Help French "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86 "{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.9 Game "{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software "{D4329609-4102-4F8C-B83F-7FE024EEA314}" = Dead Space™ 3 "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D5341564-7B93-ADAC-E737-C24AA85CC5FF}" = CCC Help Chinese Standard "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86 "{DB847E94-446B-49E0-AC5D-C5627EC8B0C0}" = SpyHunter "{DCB46B42-723F-350E-B18A-449BC6C21636}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 False "{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E3FB1E5A-1C24-D581-6BC8-6F8AC2D343AD}" = CCC Help Finnish "{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 False "{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger "{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 "{E82097B9-A3B8-404A-9A92-AC16A8AC9576}" = Adobe After Effects CS5.5 "{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 False "{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support "{ED83D14F-8100-63D0-9329-77A92380EB92}" = HydraVision "{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 "{F0E79BE5-20F5-82F4-6579-2A91AED3F066}" = Catalyst Control Center Localization All "{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 False "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials "{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.0 False "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Afterburner" = MSI Afterburner 2.0.0 "Aimersoft Video Converter Ultimate_is1" = Aimersoft Video Converter Ultimate(Build 5.0.1.0) "AIMP3" = AIMP3 "Ares" = Ares 2.2.4 "BioShock Infinite_is1" = BioShock Infinite "BitTorrent" = BitTorrent "BlackBerry_Desktop" = BlackBerry Desktop Software 7.1 "Brontok Removal Tool_is1" = Brontok Removal Tool "BRONTOKRemoval Tool_is1" = BRONTOKRemoval Tool "Bus Driver" = Bus Driver 1.1 "Canon MOV Decoder" = Canon MOV Decoder "Canon MOV Encoder" = Canon MOV Encoder "chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help "com.adobe.AdobeStory.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Story "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "DAEMON Tools Lite" = DAEMON Tools Lite "Dishonored (c) Bethesda Softworks_is1" = Dishonored (c) Bethesda Softworks version 1 "DPP" = Canon Utilities Digital Photo Professional 3.10 "Driver" = Driver "EOS Sample Music" = Canon Utilities EOS Sample Music "EOS Utility" = Canon Utilities EOS Utility "EOS Video Snapshot Task" = Canon Utilities EOS Video Snapshot Task for ZoomBrowser EX "Euro Truck Simulator 2_is1" = Euro Truck Simulator 2 version 1.3.1.43709 "EVEREST Home Edition_is1" = EVEREST Home Edition v2.20 "FIFA 12 (c) EA_is1" = FIFA 12 (c) EA version 1 "FLV to MP3_is1" = FLV to MP3 v1.00 "foobar2000" = foobar2000 v1.2.1 "Foxit PDF Editor" = Foxit PDF Editor "Fraps" = Fraps "Free FLV Converter_is1" = Free FLV Converter V 7.5.0 "Free Studio_is1" = Free Studio version 2013 "Freemake Video Converter_is1" = Freemake Video Converter version 3.1.2 "Freez FLV to MP3 Converter v1.5_is1" = Freez FLV to MP3 Converter "GFWL_{434D0FA1-3E0C-4D03-A5D4-5E1000008100}" = F1 2011 "GOM Player" = GOM Player "Google Chrome" = Google Chrome "InstallShield_{1C08A24C-B168-407E-A826-68FAF5F20710}" = Age of Empires III - The WarChiefs "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Aygıt Yöneticisi "InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "InstallShield_{7B9CC60A-9B81-46A3-A953-76B6BF9EEC97}" = Age of Empires III "InstallShield_{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = X-Men Origins - Wolverine(TM) "InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X "InstallShield_{AEC9311A-90AC-4083-B3CD-428C3BB3891C}" = Magic Bullet Looks "InstallShield_{C43C1415-3DFC-4089-9A32-0BECF28A6046}" = Age of Empires III - The Asian Dynasties "Internet Download Manager" = Internet Download Manager "JDownloader" = JDownloader "KillProcess" = KillProcess 2.44 "KLiteCodecPack_is1" = K-Lite Codec Pack 8.7.0 (Basic) "Logitech Vid" = Logitech Vid HD "LOLReplay" = LOLReplay "Mafia II_is1" = Mafia II "MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX "MovieUploaderForYouTube" = Canon Utilities Movie Uploader for YouTube "Mozilla Firefox 14.0.1 (x86 tr)" = Mozilla Firefox 14.0.1 (x86 tr) "MozillaMaintenanceService" = Mozilla Maintenance Service "MP4 To MP3 Converter_is1" = MP4 To MP3 Converter V3.0 "Nero8Lite_is1" = Nero 8 Micro "Nokia PC Internet Access" = Nokia PC Internet Access "Nokia PC Suite" = Nokia PC Suite "Office14.PROPLUS" = Microsoft Office Professional Plus 2010 "OpenAL" = OpenAL "Opera 12.00.1467" = Opera 12.00 "PhotoStitch" = Canon Utilities PhotoStitch "Picture Style Editor" = Canon Utilities Picture Style Editor "PunkBusterSvc" = PunkBuster Services "R1JJRDI=_is1" = GRID 2 (c) Codemasters version 1 "RADVideo" = RAD Video Tools "Revolt" = Revolt "RGlzaG9ub3JlZA==_is1" = Dishonored The Brigmore Witches "Security Task Manager" = Security Task Manager 1.8g "Sniper Ghost Warrior 2_is1" = Sniper Ghost Warrior 2 "Steam App 211500" = RaceRoom Racing Experience "Steam App 8730" = GTR Evolution Demo Dedicated Server "Stronghold 3_is1" = Stronghold 3 "T3V0bGFzdA==_is1" = Outlast "Task Killer" = Task Killer (remove only) "TeamViewer 7" = TeamViewer 7 "The KMPlayer" = The KMPlayer (remove only) "Total War Rome 2_R.G. Mechanics_is1" = Total War Rome 2 "Twixtor 5, After Effects-compatible plugin set" = Twixtor 5, After Effects-compatible plugin set "TWV0cm9MYXN0TGlnaHQ=_is1" = Metro: Last Light (c) Deep Silver version 1 "Uplay" = Uplay "Vuze_Remote Toolbar" = Vuze Remote Toolbar "Winamp" = Winamp "WinLiveSuite" = Windows Live Temel Parçalar "WinRAR archiver" = WinRAR 4.11 (32-bit) "Xilisoft FLV Converter" = Xilisoft FLV Converter "ZoomBrowser EX" = Canon Utilities ZoomBrowser EX "ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-969899708-634147422-4128253439-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{79A765E1-C399-405B-85AF-466F52E918B0}" = KMPlayer Toolbar Updater "DealPly" = DealPly "Puzzle Pirates" = Puzzle Pirates "Winamp Detect" = Winamp Algılayıcı [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 04.12.2012 18:37:13 | Computer Name = Evrani-PC | Source = Winlogon | ID = 4103 Description = Windows license activation failed. Error 0x00000000. Error - 04.12.2012 19:57:10 | Computer Name = Evrani-PC | Source = Application Error | ID = 1000 Description = Faulting application name: googleearth.exe, version: 6.2.2.6613, time stamp: 0x4f8941c7 Faulting module name: googleearth_free.dll, version: 0.0.0.0, time stamp: 0x4f8941af Exception code: 0xc0000005 Fault offset: 0x002f4efc Faulting process id: 0xa4c Faulting application start time: 0x01cdd27b0f80d9d3 Faulting application path: C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe Faulting module path: C:\Program Files (x86)\Google\Google Earth\client\googleearth_free.dll Report Id: 5061823e-3e6e-11e2-8438-20cf30f0e866 Error - 05.12.2012 02:59:28 | Computer Name = Evrani-PC | Source = Software Protection Platform Service | ID = 8198 Description = License Activation (slui.exe) failed with the following error code: 0x800401F9 Error - 05.12.2012 02:59:28 | Computer Name = Evrani-PC | Source = Winlogon | ID = 4103 Description = Windows license activation failed. Error 0x00000000. Error - 05.12.2012 12:16:39 | Computer Name = Evrani-PC | Source = Software Protection Platform Service | ID = 8198 Description = License Activation (slui.exe) failed with the following error code: 0x800401F9 Error - 05.12.2012 12:16:39 | Computer Name = Evrani-PC | Source = Winlogon | ID = 4103 Description = Windows license activation failed. Error 0x00000000. Error - 06.12.2012 03:33:27 | Computer Name = Evrani-PC | Source = Software Protection Platform Service | ID = 8198 Description = License Activation (slui.exe) failed with the following error code: 0x800401F9 Error - 06.12.2012 03:33:27 | Computer Name = Evrani-PC | Source = Winlogon | ID = 4103 Description = Windows license activation failed. Error 0x00000000. Error - 06.12.2012 08:04:53 | Computer Name = Evrani-PC | Source = Software Protection Platform Service | ID = 8198 Description = License Activation (slui.exe) failed with the following error code: 0x800401F9 Error - 06.12.2012 08:04:53 | Computer Name = Evrani-PC | Source = Winlogon | ID = 4103 Description = Windows license activation failed. Error 0x00000000. [ System Events ] Error - 09.09.2013 20:11:11 | Computer Name = Evrani-PC | Source = sptd | ID = 262148 Description = Driver detected an internal error in its data structures for . Error - 09.09.2013 20:12:32 | Computer Name = Evrani-PC | Source = Service Control Manager | ID = 7026 Description = The following boot-start or system-start driver(s) failed to load: sptd Error - 09.09.2013 20:15:09 | Computer Name = Evrani-PC | Source = Application Popup | ID = 1060 Description = \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 09.09.2013 20:15:09 | Computer Name = Evrani-PC | Source = Service Control Manager | ID = 7000 Description = The EsgScanner service failed to start due to the following error: %%1275 Error - 09.09.2013 20:16:30 | Computer Name = Evrani-PC | Source = Application Popup | ID = 1060 Description = \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 09.09.2013 20:16:30 | Computer Name = Evrani-PC | Source = Service Control Manager | ID = 7000 Description = The EsgScanner service failed to start due to the following error: %%1275 Error - 09.09.2013 20:22:22 | Computer Name = Evrani-PC | Source = Application Popup | ID = 1060 Description = \SystemRoot\SysWow64\DRIVERS\EsgScanner.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver. Error - 09.09.2013 20:22:22 | Computer Name = Evrani-PC | Source = Service Control Manager | ID = 7000 Description = The EsgScanner service failed to start due to the following error: %%1275 Error - 09.09.2013 20:29:35 | Computer Name = Evrani-PC | Source = sptd | ID = 262148 Description = Driver detected an internal error in its data structures for . Error - 09.09.2013 20:30:16 | Computer Name = Evrani-PC | Source = Service Control Manager | ID = 7026 Description = The following boot-start or system-start driver(s) failed to load: sptd < End of report >