OTL Extras logfile created on: 27-Jul-14 3:30:32 PM - Run 2 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\name\Downloads 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000409 | Country: United States | Language: ENU | Date Format: dd-MMM-yy 3.98 Gb Total Physical Memory | 1.97 Gb Available Physical Memory | 49.48% Memory free 7.95 Gb Paging File | 6.14 Gb Available in Paging File | 77.23% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 575.98 Gb Total Space | 348.92 Gb Free Space | 60.58% Space Free | Partition Type: NTFS Drive D: | 97.66 Gb Total Space | 16.84 Gb Free Space | 17.25% Space Free | Partition Type: NTFS Drive E: | 2.91 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF Computer Name: NAME-PC | User Name: name | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Extra Registry (All) ==========[/color] [color=#E56717]========== File Associations ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation) .hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html[@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .url[@ = InternetShortcut] -- C:\Program Files (x86)\internet explorer\iexplore.exe (Microsoft Corporation) .js[@ = jsfile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .reg [@ = regfile] -- regedit.exe "%1" .txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation) .vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) .wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\] .bat [@ = batfile] -- "%1" %* .chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation) .cmd [@ = cmdfile] -- "%1" %* .com [@ = comfile] -- "%1" %* .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .exe [@ = exefile] -- "%1" %* .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) .hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation) .html [@ = htmlfile] -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation) .inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .url [@ = InternetShortcut] -- C:\Program Files (x86)\internet explorer\iexplore.exe (Microsoft Corporation) .js [@ = jsfile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .pif [@ = piffile] -- "%1" %* .reg [@ = regfile] -- regedit.exe "%1" .scr [@ = scrfile] -- "%1" /S .txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation) .vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) .wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation) [HKEY_USERS\S-1-5-21-2680072073-3876680634-2631007406-1000\SOFTWARE\Classes\] .html [@ = ChromeHTML.MZGE26JONOOPHR4UM6WJ7FAHQ4] -- Reg Error: Key error. File not found [color=#E56717]========== Shell Spawning ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office15\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) https [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Program Files (x86)\internet explorer\iexplore.exe" "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command] batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) batfile [open] -- "%1" %* batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation) cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation) cmdfile [open] -- "%1" %* cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation) comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation) htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office15\msohtmed.exe" %1 (Microsoft Corporation) htmlfile [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) htmlfile [opennew] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation) htmlfile [print] -- "C:\Windows\system32\rundll32.exe" "C:\Windows\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) http [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) https [open] -- "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" -nohome (Microsoft Corporation) inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) InternetShortcut [open] -- "C:\Program Files (x86)\internet explorer\iexplore.exe" "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation) jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation) jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation) piffile [open] -- "%1" %* regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation) regfile [open] -- regedit.exe "%1" regfile [merge] -- Reg Error: Key error. regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation) scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation) txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation) txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation) vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation) wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation) wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation) Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [cmd] -- cmd.exe /s /k pushd "%V" Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Applications\iexplore.exe [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation) CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" (Microsoft Corporation) [color=#E56717]========== Security Center Settings ==========[/color] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "UpdatesDisableNotify" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [color=#E56717]========== Firewall Settings ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [color=#E56717]========== Authorized Applications List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] [color=#E56717]========== Vista Active Open Ports Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{08ADF6E0-B321-42CA-94B2-A113E14DE69F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{0BEB021F-B9A4-4467-A1FE-AB7760302FB6}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{14A7F696-F61F-4505-88E5-EEA1E3DE0D94}" = lport=2869 | protocol=6 | dir=in | app=system | "{20990AC9-D2F1-4CB4-9222-DFD888A2A7C5}" = rport=445 | protocol=6 | dir=out | app=system | "{2268B2EA-2F67-4820-9260-8E443C6DF818}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs4 server | "{23C01F2A-68B4-4880-8DAF-6817FC202D26}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{27584B9C-998F-457D-9090-2EEE6CC2BA91}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{27995956-7E6D-4BCC-9F04-7A33712B547D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{29C8D037-D341-4797-8BC7-7C13C08869C7}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{2AF069DE-0BB1-4180-A7C6-06700E1285F7}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | "{2F1F9251-73AF-4306-8F5C-DE466343D38F}" = lport=8182 | protocol=6 | dir=in | name=java(tm) platform se binary | "{309B3F0D-8ECC-415E-8020-B28151487951}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{3F1C03B1-BEE5-442A-9CCB-BC6150A1D526}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{4EC976B5-0680-4D75-B6E5-1586B07F49F4}" = rport=10243 | protocol=6 | dir=out | app=system | "{513CDED6-DEF4-4FA9-A7C5-F177B7C51E68}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{514B5E20-7EF4-4C8D-A834-969B1A41B86D}" = lport=10243 | protocol=6 | dir=in | app=system | "{548AE379-DFAA-44A6-931B-9F17858E6C00}" = rport=138 | protocol=17 | dir=out | app=system | "{5B8AF1E9-220E-4E48-9F0B-9803EECDFE5D}" = lport=65435 | protocol=17 | dir=in | name=360随身wifi nat | "{60678E1B-088A-47DB-A7D3-31BC902C450C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{607CA9A3-81E2-41A5-A308-EE33522390E1}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 | "{618F77BD-0ADA-4FCD-9FB7-93069FA94930}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{6998D910-DCA9-4B66-A9CA-F0197875E074}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{6CE42165-5541-4071-82C1-4FB33222660E}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{71FFD210-42CB-4936-899F-A98B70CCBB98}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{72500110-4A3A-486F-BF4C-466BA127A6DB}" = lport=51001 | protocol=6 | dir=in | name=adobe version cue cs4 server | "{74FD5D2B-DFD8-4156-B7F3-498850D71E46}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office15\outlook.exe | "{786CC2C7-5573-4D71-943E-52C18A490C8E}" = lport=137 | protocol=17 | dir=in | app=system | "{7A56B7F4-518B-4389-91D0-3E11FD97D910}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{7BBAC52B-46AD-41FD-9133-57FBE5679243}" = lport=5353 | protocol=17 | dir=in | name=java(tm) platform se binary | "{7D89664B-D046-4390-9DBB-DCF7D668D56B}" = lport=8182 | protocol=6 | dir=in | name=java(tm) platform se binary | "{7FCDD84B-BC88-4AE2-B079-6153C836105A}" = lport=2869 | protocol=6 | dir=in | app=system | "{8044B2F7-58EF-4106-9110-AEDCD83807A2}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | "{829A1BCC-4CA4-4063-9A04-C92FDDD0F72A}" = lport=51000 | protocol=6 | dir=in | name=adobe version cue cs4 server | "{9938D1BA-C817-47FE-BFBE-27D6D64EDFC8}" = lport=139 | protocol=6 | dir=in | app=system | "{9ABBE081-9027-46D9-AC16-5AFF13D07F51}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{9BCF6817-1A4D-44B0-9A4A-886E60D6C0AD}" = lport=445 | protocol=6 | dir=in | app=system | "{A1C31A01-B206-4DD3-93BD-5F30C11528A0}" = lport=rpc | protocol=6 | dir=in | svc=policyagent | app=%systemroot%\system32\svchost.exe | "{A85BF53B-AF9C-4D6E-89B0-E21AD7E86F96}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{B7CB8A77-9E26-4EA8-9290-89AD0DE4B36B}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | "{BBBC6F5A-C570-4CB3-88FD-EB1BE15B8D6A}" = rport=139 | protocol=6 | dir=out | app=system | "{C7661A0F-8C19-4F75-9D85-9878F89AEB41}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{C9D32B56-8D40-444B-AEC4-D2DF17A759A7}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs4 server | "{CEF0C9C6-62E0-43A3-9EC3-0AC7C0401C63}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{D41256A4-0712-4CDD-942E-32FCC807945A}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{D634F6BC-3E64-43E4-ABA1-6D9BBFEDFD4C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{D75891DB-C614-4D88-8300-25F708EAE80D}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | "{E03DF310-D697-4A7C-83E4-6C1DFEC70272}" = lport=5353 | protocol=17 | dir=in | name=java(tm) platform se binary | "{E7682919-18D8-4B50-9CC2-9292DDF1C325}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{EA429C3B-DB19-4E52-ABC6-24E547EA48EA}" = lport=138 | protocol=17 | dir=in | app=system | "{EC641677-83C9-4D5F-8F56-5E7354573A65}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{EE1D6443-9D19-4C59-B82C-CE39CDF36C25}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{EE43CB98-F0CC-40A9-9F94-93E8018FAA4E}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{F5F06626-3CEC-4184-B094-4586D50A4A42}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | "{FBCAFDE1-1939-452A-8938-4619C10D44A4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{FDFCD9E2-61FA-459C-81E9-60AD0B25EC4B}" = rport=2869 | protocol=6 | dir=out | app=system | "{FE3F14EA-6F6D-4833-93C9-A9AE278C55A3}" = rport=137 | protocol=17 | dir=out | app=system | [color=#E56717]========== Vista Active Application Exception List ==========[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{03ABFB37-ED58-402D-8851-CEC66BE8236F}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{08F77C23-9395-424C-95E6-489EB91D3555}" = protocol=6 | dir=in | app=c:\program files (x86)\kingsoft\powerworddict\xdict.exe | "{11E1900C-4914-41E3-932B-55DDBA151539}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{138E4447-52D6-433B-99B6-E9DD56D80DFE}" = protocol=17 | dir=in | app=c:\program files\kmspico\service_kms.exe | "{1455A248-E278-45C0-B1FC-1851637B7A03}" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\mobilemgr\360mobilemgr.exe | "{1757D1BE-ECAF-4072-A801-62A2227A22AF}" = protocol=6 | dir=in | app=c:\program files\kmspico\service_kms.exe | "{19FDC3DE-CBD2-4F3A-A258-F8647EC10F4D}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{1D1B2921-2116-4E76-9D69-8E930C7E3B98}" = protocol=6 | dir=in | app=c:\program files (x86)\bzeek\bzeek.exe | "{21A1E936-BD6F-4844-9F2C-488EE35CC710}" = protocol=17 | dir=in | app=c:\program files (x86)\bzeek\bzeek.exe | "{28F68474-136F-46C7-ACB9-4506F59C5944}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe | "{2CE71C0D-3F73-4DD7-A68A-4BE80F03BC1D}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{2D911CF0-A7DC-4302-B6C3-2DE89AE7EB14}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer_service.exe | "{34682B49-B7DC-44F0-BFDC-1DB3FBEEB095}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{381CB2AE-479E-40B5-98A4-8B77551E2ADF}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe | "{3CFC942D-D87B-43D0-9929-8DF7CB42DDAE}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{3F9FD401-8B96-40BE-A5BE-E6925D00FE2B}" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\liveupdate360.exe | "{4D26EF9D-E5C5-4D92-B48A-04D2E62307B9}" = protocol=17 | dir=in | app=c:\users\name\appdata\roaming\dropbox\bin\dropbox.exe | "{4D59E8CE-5898-4B25-B91B-1A6BD813761C}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{50BE651A-BD3A-436B-8504-AF44D48D3565}" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | "{51BAFF7C-D386-452B-86F2-87ED546C5A37}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{5259A851-F436-4417-AA69-D88FC3BDFCB5}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{52BCCDE1-ED1D-4A91-A531-EA81487BAC3D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{52C20DCB-EA3D-43CA-9E19-6DFAF90AA895}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | "{52F7CDA9-B8E9-417C-9043-A8B26C4F996E}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe | "{57504849-40D0-401D-99FD-83ACE4309E6C}" = protocol=17 | dir=in | app=c:\program files (x86)\kingsoft\powerworddict\xdict.exe | "{58763517-CA12-4F35-9BFC-1D20BF5D7BB1}" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\liveupdate360.exe | "{58A5A342-265B-4690-8DF7-7D89629202BC}" = protocol=17 | dir=in | app=c:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe | "{5DAB5ABA-CEF2-4614-B210-6EAA64222115}" = protocol=17 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "{60EA3F17-B1AE-41F8-ACEB-4EAD71E7F4E6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{6386143B-2ADC-492F-9E19-F42D82B652E1}" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\safemon\360tray.exe | "{641CD50B-C53D-4757-A1FA-C87C93DEA0F2}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{687720B0-BC5C-4818-9A5F-FA11A0B9E2D3}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{6931FB94-2CDA-4645-B718-F9AD627C75E6}" = protocol=17 | dir=in | app=c:\program files\kmspico\autopico.exe | "{6DC65DD5-E402-4CEA-97F1-28FEA4AFDBD5}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe | "{6EE815C5-C7D6-4935-B27C-45861BFC319C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\ucmapi.exe | "{6EF59391-070B-4130-81D2-EA9B4F120FC9}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | "{720ECF6E-DF77-4369-8ADE-C3A4BBC9A652}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe | "{7CCF8073-5780-4A73-93BA-E0CA1203A895}" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "{7CD3161A-D479-4213-864C-73A92D80D45A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{8536D1D8-0738-40E5-A0BE-D60BF80D2C50}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version9\teamviewer.exe | "{91A2102E-F4F7-4233-88C4-F3E4A1C68886}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{97561DA7-6512-4186-A5AD-4E0D48746CDC}" = protocol=6 | dir=in | app=c:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe | "{9C1D8F80-3A9E-43BE-90AF-BDFBE8441F5E}" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | "{9C1DA4FD-0BE6-44DF-B2C5-E86F78AC0AFA}" = protocol=17 | dir=in | app=c:\program files\kmspico\kmseldi.exe | "{9D8A222A-D5A1-40A9-9228-4184C35D9AE7}" = protocol=6 | dir=in | app=c:\users\name\appdata\roaming\spotify\spotify.exe | "{9E32EE9C-9260-48C4-812F-E155B161BCF1}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe | "{9FF3BBEE-A92C-4D0D-A400-C5E434F64FF5}" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\liveupdate360.exe | "{A07BD82C-1B13-4372-B082-0CE49BFA4A9D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{A217A5FB-7BD7-4F34-AE61-B6AFA039FD68}" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\liveupdate360.exe | "{A27B0A48-5077-41B4-9DE2-C024359AC288}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{ABFA90C9-0EA6-4A51-A86C-0B17B8EC1A5A}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{AEC6A8BF-9F77-45A3-A25E-A3D308991338}" = protocol=6 | dir=in | app=c:\program files (x86)\internet explorer\iexplore.exe | "{AFB2A267-2658-4C0C-8441-200DA9752A62}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | "{B1C59C43-1CB9-4DDF-BE35-E55675A35385}" = protocol=6 | dir=in | app=c:\users\name\appdata\roaming\dropbox\bin\dropbox.exe | "{B5D165AE-A500-474B-BFBC-F60224A69263}" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | "{B829A944-8351-4360-B055-44B51E7DFFE5}" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\safemon\360tray.exe | "{BA9D7FD3-D60C-4E24-B1FA-D69240E25FC4}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 | "{BA9FEC0E-0A7C-4289-8E68-D03D3742AC08}" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\safemon\360tray.exe | "{BF73D84D-D677-4DD5-8DC8-3239C3CB4316}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{BFE798E9-8C44-45E1-9853-3DDDD7E8BF90}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office15\lync.exe | "{D596F838-CC09-45F8-A1D2-301B13B7C575}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe | "{D7C35607-E662-4E96-9F5C-7E2D75547044}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{D82618E8-FCFF-4125-A91D-0B66700778AC}" = protocol=6 | dir=in | app=c:\program files\kmspico\kmseldi.exe | "{DCD7C15E-9A16-4B44-ADCB-F729BEA8C61C}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{DE5070AE-43B4-43C1-B39A-3850DA7EB18F}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{DFDFB2D6-9797-4E20-8ACC-00921ACA06A7}" = protocol=6 | dir=out | app=system | "{E0E20698-CC8E-4E90-86F7-F2EAE001CC02}" = protocol=17 | dir=in | app=c:\users\name\appdata\roaming\spotify\spotify.exe | "{E4E5BD4D-0ECA-4F33-934E-DEDD2BB1BD44}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{EDE5EED1-C72F-4CDC-8858-D0F7B10EB747}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{EE23F198-1D89-4A3B-9CD5-746ADDB65594}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{EF7BC8C7-4290-4716-B682-2A437E92AB36}" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\netmon\360speedtest.exe | "{F43E9B1D-D395-4502-AC91-9C52CA606F18}" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\safemon\360tray.exe | "{F4B2DBF7-F292-4713-923D-2A3E449E106C}" = protocol=6 | dir=in | app=c:\program files\kmspico\autopico.exe | "TCP Query User{0EFC0CDC-E1DE-47A9-B882-25DCE5E4436C}C:\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\eclipse\eclipse.exe | "TCP Query User{1B1DEF31-B391-4B18-98C1-AF353C70E24A}C:\program files\java\jdk1.7.0_21\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.7.0_21\bin\java.exe | "TCP Query User{28C08210-968F-4ADC-88FC-2C91BBE4BD94}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=6 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "TCP Query User{43E0C3E3-3564-427B-8D04-2A2F2CD0C845}C:\windows\system32\javaw.exe" = protocol=6 | dir=in | app=c:\windows\system32\javaw.exe | "TCP Query User{50962096-547F-4C1C-987A-0FE3DC9E5F72}C:\program files (x86)\android\android-studio\bin\studio64.exe" = protocol=6 | dir=in | app=c:\program files (x86)\android\android-studio\bin\studio64.exe | "TCP Query User{56428966-B4BF-4CBC-A4B2-0AAF78BED932}C:\dev\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\dev\eclipse\eclipse.exe | "TCP Query User{6BE59B67-88E4-441D-B7C8-B396F11A1B6F}C:\program files (x86)\kingsoft\powerworddict\xdict.exe" = protocol=6 | dir=in | app=c:\program files (x86)\kingsoft\powerworddict\xdict.exe | "TCP Query User{86C9437E-ED22-43A1-86FB-0A11CAA22DD3}C:\program files\java\jdk1.7.0_45\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jdk1.7.0_45\jre\bin\java.exe | "TCP Query User{BF3C0EAC-411A-4483-804A-BB10DF703F49}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe | "TCP Query User{F0E1DB32-11B0-4C55-825E-5FAD086900DD}C:\program files (x86)\360\360safe\netmon\360netrepair.exe" = protocol=6 | dir=in | app=c:\program files (x86)\360\360safe\netmon\360netrepair.exe | "UDP Query User{07A2E239-ECF8-4184-A5CD-68CD0C06AE45}C:\program files (x86)\android\android-studio\bin\studio64.exe" = protocol=17 | dir=in | app=c:\program files (x86)\android\android-studio\bin\studio64.exe | "UDP Query User{2182C407-77CA-47BF-A9F8-DFA8F81851B3}C:\dev\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\dev\eclipse\eclipse.exe | "UDP Query User{36007F60-6780-4163-AB7C-BFFA08B149BE}C:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\syncables\syncables desktop\jre\bin\javaw.exe | "UDP Query User{42A903BA-8FA7-480E-A132-8601B1F0EB1C}C:\program files\java\jdk1.7.0_45\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.7.0_45\jre\bin\java.exe | "UDP Query User{4DF8A3E5-51A3-4193-978E-141EC7B372EC}C:\program files (x86)\kingsoft\powerworddict\xdict.exe" = protocol=17 | dir=in | app=c:\program files (x86)\kingsoft\powerworddict\xdict.exe | "UDP Query User{5BBA06D0-4FF0-4EF6-8AE4-6BB77897CD50}C:\program files (x86)\360\360safe\netmon\360netrepair.exe" = protocol=17 | dir=in | app=c:\program files (x86)\360\360safe\netmon\360netrepair.exe | "UDP Query User{69E98C85-CFE0-4CCB-BACB-FD62221A4E01}C:\program files\java\jdk1.7.0_21\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jdk1.7.0_21\bin\java.exe | "UDP Query User{6B62C05E-01A0-4FBD-8A28-28B6709D08BC}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe" = protocol=17 | dir=in | app=c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe | "UDP Query User{9747B7D0-AAF7-41A1-B343-7B679542B882}C:\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\eclipse\eclipse.exe | "UDP Query User{D0C82155-5F44-449A-BD9B-A3DF0BB663EA}C:\windows\system32\javaw.exe" = protocol=17 | dir=in | app=c:\windows\system32\javaw.exe | [color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{034106B5-54B7-467F-B477-5B7DBB492624}" = Microsoft Sync Framework Services v1.0 SP1 (x64) "{0F37D969-1260-419E-B308-EF7D29ABDE20}" = Web Deployment Tool "{1364C748-A240-F0F3-490E-10C02357523E}" = ccc-utility64 "{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot "{1AAF3A3B-7B32-4DDF-8ABB-438DAEB46EEC}" = Windows Live Family Safety "{1AB7EDC5-D891-34C5-9FF1-BE6A85ACC44B}" = Microsoft Team Foundation Server 2010 Object Model - ENU "{1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1}" = Microsoft .NET Framework 4.5 "{1B8ABA62-74F0-47ED-B18C-A43128E591B8}" = Windows Live ID Sign-in Assistant "{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}" = Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 "{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}" = Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) "{206BD2C5-DE08-4577-A0D7-D441A79D5A3A}" = Windows Live Remote Client Resources "{230D1595-57DA-4933-8C4E-375797EBB7E1}" = Bluetooth Win7 Suite (64) "{26A24AE4-039D-4CA4-87B4-2F86418011FF}" = Java 8 Update 11 (64-bit) "{289809B1-078A-49F3-83D0-7E51715B3915}" = Windows Live Family Safety "{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64 "{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64 "{33E28B58-7BA0-47B7-AA01-9225ABA2B8A9}" = iTunes "{350FD0E7-175A-4F86-84EF-05B77FCD7161}" = Windows Live Remote Service Resources "{401C50F6-B443-43EE-8F27-A80DB19B03FD}" = Windows Live Family Safety "{46A5FBE9-ADB3-4493-A1CC-B4CFFD24D26A}" = Windows Live Family Safety "{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime "{50B92D3B-B8F4-4E76-9F8B-2CEDD5A8E9E7}" = Windows Live Family Safety "{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources "{5FCD6EFE-C2E7-4D77-8212-4BA223D8DF8E}" = Windows Live Remote Client Resources "{64A3A4F4-B792-11D6-A78A-00B0D0170450}" = Java SE Development Kit 7 Update 45 (64-bit) "{64A3A4F4-B792-11D6-A78A-00B0D0180110}" = Java SE Development Kit 8 Update 11 (64-bit) "{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources "{662014D2-0450-37ED-ABAE-157C88127BEB}" = Visual Studio 2010 Prerequisites - English "{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64 "{6AF2AC2A-3532-43FD-9F4D-BDC9C0D724C7}" = Apple Mobile Device Support "{6C9D3F1D-DBBE-46F9-96A0-726CC72935AF}" = Windows Live Remote Service Resources "{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour "{717E49A9-8CA9-4B14-9D91-3591D7F4E9F8}" = Windows Live Family Safety "{75C8188C-883C-310E-BB83-E7EA3023FCB1}" = Microsoft .NET Framework 4 Client Profile CHT Language Pack "{7734509D-A1F7-4A5E-AF9D-77CD17AE41AF}" = Windows Live Family Safety "{81455DEB-FC7E-3EE5-85CA-2EBDD9FD61EB}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x64 "{818B5BB8-26AB-4FD7-A793-220EE0C158C3}" = Windows Live Family Safety "{825C7D3F-D0B3-49D5-A42B-CBB0FBE85E99}" = Windows Live Remote Client Resources "{8438EC02-B8A9-462D-AC72-1B521349C001}" = Microsoft Sync Framework Runtime v1.0 SP1 (x64) "{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources "{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64 "{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4 "{88BAE373-00F4-3E33-828F-96E89E5E0CB9}" = Microsoft Visual Studio 2010 IntelliTrace Collection (x64) "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4 "{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64 "{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources "{8FF0ACBD-17A5-3637-95F4-D7C69723E2BF}" = Microsoft Visual Studio 2010 Performance Collection Tools SP1 - ENU "{90150000-0015-0409-1000-0000000FF1CE}" = Microsoft Access MUI (English) 2013 "{90150000-0016-0409-1000-0000000FF1CE}" = Microsoft Excel MUI (English) 2013 "{90150000-0018-0409-1000-0000000FF1CE}" = Microsoft PowerPoint MUI (English) 2013 "{90150000-0019-0409-1000-0000000FF1CE}" = Microsoft Publisher MUI (English) 2013 "{90150000-001A-0409-1000-0000000FF1CE}" = Microsoft Outlook MUI (English) 2013 "{90150000-001B-0409-1000-0000000FF1CE}" = Microsoft Word MUI (English) 2013 "{90150000-001F-0404-1000-0000000FF1CE}" = Microsoft Office 校訂工具 2013 - 繁體中文 "{90150000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - English "{90150000-001F-040C-1000-0000000FF1CE}" = Outils de vérification linguistique 2013 de Microsoft Office - Français "{90150000-001F-0804-1000-0000000FF1CE}" = Microsoft Office 校对工具 2013 - 简体中文 "{90150000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proofing Tools 2013 - Español "{90150000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2013 "{90150000-0044-0409-1000-0000000FF1CE}" = Microsoft InfoPath MUI (English) 2013 "{90150000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2013 "{90150000-0090-0409-1000-0000000FF1CE}" = Microsoft DCF MUI (English) 2013 "{90150000-00A1-0409-1000-0000000FF1CE}" = Microsoft OneNote MUI (English) 2013 "{90150000-00BA-0409-1000-0000000FF1CE}" = Microsoft Groove MUI (English) 2013 "{90150000-00C1-0000-1000-0000000FF1CE}" = Microsoft Office 32-bit Components 2013 "{90150000-00C1-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2013 "{90150000-00E1-0409-1000-0000000FF1CE}" = Microsoft Office OSM MUI (English) 2013 "{90150000-00E2-0409-1000-0000000FF1CE}" = Microsoft Office OSM UX MUI (English) 2013 "{90150000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2013 "{90150000-0117-0409-1000-0000000FF1CE}" = Microsoft Access Setup Metadata MUI (English) 2013 "{90150000-012B-0409-1000-0000000FF1CE}" = Microsoft Lync MUI (English) 2013 "{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4 "{91150000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2013 "{911519EB-BD75-4B3B-BD17-BA3747C9B854}" = Windows Live Family Safety "{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033" = Microsoft .NET Framework 4.5 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{968720F5-3D81-7A28-C902-0876A57B1523}" = ATI AVIVO64 Codecs "{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid "{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64 "{A508D5A2-3AC1-4594-A718-A663D6D3CF11}" = Windows Live Remote Service Resources "{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources "{AE91E0F3-C49A-4EF4-8B98-A07BD409EB90}" = Windows Live Remote Service Resources "{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}" = Adobe InDesign CS4 Icon Handler x64 "{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources "{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Intel(R) Turbo Boost Technology Monitor 2.0 "{CB0FD760-C6C6-3AF6-AD18-FE3B3B78727D}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "{CFF3C688-2198-4BC3-A399-598226949C39}" = Windows Live Remote Client Resources "{D07A61E5-A59C-433C-BCBD-22025FA2287B}" = Windows Live Language Selector "{D1C1556C-7FF3-48A3-A5D6-7126F0FAFB66}" = Windows Live Remote Client Resources "{D3E39E77-0EB4-36FB-B97A-8C8AB21B9A45}" = Visual Studio .NET Prerequisites - English "{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit) "{D57519D3-2E37-3E34-94AF-4D59BFAB87E6}" = Microsoft Visual Studio 2010 Office Developer Tools (x64) "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4 "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{E5748D30-7E6D-3A8E-BFE6-C1D02C6DDABB}" = Microsoft Help Viewer 1.1 "{EF8B1A2E-9CCB-3AB2-91E3-4EEDAB1294E1}" = Microsoft Device Emulator (64 bit) version 3.0 - ENU "{EFB20CF5-1A6D-41F3-8895-223346CE6291}" = Windows Live Remote Service Resources "{F5079164-1DB9-3BDA-853B-F78AF67CE071}" = Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319 "{FAA3933C-6F0D-4350-B66B-9D7F7031343E}" = Windows Live Remote Service Resources "{FAD0EC0B-753B-4A97-AD34-32AC1EC8DB69}" = Windows Live Remote Client Resources "{FE4BE0BD-1EDB-4D24-9614-847B3C472887}" = Windows Live Family Safety "Docear" = Docear "GooglePinyin3" = 谷歌拼音输入法 3.0 "KMSpico_is1" = KMSpico v9.2.3 "Microsoft .NET Framework 4 Client Profile CHT Language Pack" = Microsoft .NET Framework 4 Client Profile 繁體中文語言套件 "Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1 "Microsoft Team Foundation Server 2010 Object Model - ENU" = Microsoft Team Foundation Server 2010 Object Model - ENU "Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) "Office15.PROPLUSR" = Microsoft Office Professional Plus 2013 "WinRAR archiver" = WinRAR 4.00 (64-bit) [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{000F2A10-9CDF-47BF-9CF2-9AC87567B433}" = Windows Live Photo Common "{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4 "{03241D8D-2217-42F7-9FCB-6A68D141C14D}" = Windows Live 软件包 "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{05855322-BE43-41FE-B583-D3AE0C326D58}" = Microsoft Silverlight 4 SDK "{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack "{0969AF05-4FF6-4C00-9406-43599238DE0D}" = ASUS Splendid Video Enhancement Technology "{098727E1-775A-4450-B573-3F441F1CA243}" = kuler "{09BCB9CE-964B-4BDA-AE46-B5A0ABEF1D3F}" = Sonic Focus "{0A4C4B29-5A9D-4910-A13C-B920D5758744}" = بريد Windows Live "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0BE273CD-AAB9-361B-8C32-D955EAC929E3}" = Microsoft Visual Studio 2010 SharePoint Developer Tools "{0C702979-FB0E-9D78-DE61-6D90E384E55F}" = CCC Help Polish "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4 "{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}" = Microsoft Sync Framework SDK v1.0 SP1 "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4 "{10F87409-10AD-8CEE-F879-EA7D57615607}" = CCC Help Turkish "{111EE7DF-FC45-40C7-98A7-753AC46B12FB}" = QuickTime 7 "{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU "{1203DC60-D9BD-44F9-B372-2B8F227E6094}" = Windows Live Temel Parçalar "{128133D3-037A-4C62-B1B7-55666A10587A}" = Windows Live UX Platform Language Pack "{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools "{14F70205-1940-4000-88C7-BE799A6B2CAD}" = Adobe Soundbooth CS4 "{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4 "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4 "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB "{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2 "{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker "{1A82AE99-84D3-486D-BAD6-675982603E14}" = Windows Live Writer "{1B7C06E1-4888-47A6-992A-0990B9683486}" = Adobe Version Cue CS4 Server "{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3 "{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4 "{1DF43EAC-B83D-BECB-F29B-76A7A353EC0C}" = CCC Help Norwegian "{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK "{20FDF948-C8ED-4543-A539-F7F4AEF5AFA2}" = Wireless Console 3 "{2168245A-B5AD-40D8-A641-48E3E070B5B6}" = Adobe Flash CS4 STI-en "{21ECABC3-40B2-42DF-8E21-ACF3A4D0D95A}" = Apple Application Support "{26A24AE4-039D-4CA4-87B4-2F83218011FF}" = Java 8 Update 11 "{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Client Installation Program "{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections "{291B3A3B-F808-45B8-8113-DF232FCB6C82}" = Microsoft .NET Compact Framework 3.5 "{29373E24-AC72-424E-8F2A-FB0F9436F21F}" = Windows Live Photo Common "{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8}" = Adobe CS4 American English Speech Analysis Models "{2B81872B-A054-48DA-BE3B-FA5C164C303A}" = ASUS FancyStart "{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman) "{2C865FB0-051E-4D22-AC62-428E035AEAF0}" = Windows Live Mesh "{2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86 "{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4 "{3125D9DE-8D7A-4987-95F3-8A42389833D8}" = Windows Live Writer Resources "{317D56AC-0DB3-48F5-929A-42032DAC9AD7}" = Windows Live Writer "{32A3A4F4-B792-11D6-A78A-00B0D0180110}" = Java SE Development Kit 8 Update 11 "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{341697D8-9923-445E-B42A-529E5A99CB7A}" = syncables desktop SE "{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live "{3477DE8A-967D-507E-6520-FD540F49C116}" = CCC Help English "{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery "{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4 "{368BEC2C-B7A2-4762-9213-2D8465D533CA}" = Windows Live UX Platform Language Pack "{36AA02C7-2E56-9A70-0B1D-380E5954292C}" = CCC Help Czech "{38253529-D97D-4901-AE53-5CC9736D3A2E}" = ASUS AI Recovery "{395F632D-7874-48B2-CE13-AAFE059B18B8}" = CCC Help Japanese "{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3B72C1E0-26A1-40F6-8516-D50C651DFB3C}" = Windows Live Essentials "{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer "{3C589A28-0DE4-5866-B9F1-C8E1BD6C3171}" = CCC Help Dutch "{3C646034-7392-2259-3EAF-E93AD1409DF8}" = CCC Help Danish "{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4 "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin "{3FE5D87D-E8C1-40BF-BE11-4C4228CD0C49}" = Docear4Word "{4019B8AB-DAFE-4CD0-E1E5-5ACD6E8E324F}" = CCC Help Hungarian "{40416836-56CC-4C0E-A6AF-5C34BADCE483}" = Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools "{404245D0-E836-4737-9C12-D4D0034540F5}_is1" = Free Countdown Timer 3.1.0 "{428FDF9F-E010-4C4C-A8BB-156960AFCA1C}" = Adobe Fireworks CS4 "{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit "{43B43577-2514-4CE0-B14A-7E85C17C0453}" = Windows Live Essentials "{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets "{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4 "{4664ED39-C80A-48F7-93CD-EBDCAFAB6CC5}" = Windows Live Writer Resources "{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live "{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer "{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4 "{4D83F339-5A5C-4B21-8FD3-5D407B981E72}" = Windows Live Photo Common "{509B0A6E-BFAA-DF35-9A64-1EC29857E513}" = CCC Help Swedish "{5172E572-C175-4F80-A6D5-5CB45826AD61}" = SceneSwitch "{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs "{523DF2BB-3A85-4047-9898-29DC8AEB7E69}" = Windows Live UX Platform Language Pack "{525072DA-059C-A596-ABBC-5D6877EBD5B5}" = Catalyst Control Center Localization All "{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01) "{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4 "{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter "{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack "{5834909F-948F-4D5A-A355-7C9AAA7C41FE}" = Catalyst Control Center - Branding "{588CE0C0-860B-49A8-AFCF-3C69465B345F}" = Windows Live Mesh "{5B65EF64-1DFA-414A-8C94-7BB726158E21}" = ControlDeck "{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker "{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 "{5DA7D148-D2D2-4C67-8444-2F0F9BD88A06}" = Windows Live Writer "{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4 "{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support "{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM "{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection "{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項 "{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources "{62BBB2F0-E220-4821-A564-730807D2C34D}" = Realtek USB 2.0 Reader Driver "{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4 "{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support "{640798A0-A4FB-4C52-AC72-755134767F1E}" = Windows Live Movie Maker "{644063FA-ABA3-42AC-A8AC-3EDC0706018B}" = Windows Live Mesh "{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS SmartLogon "{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components "{6768754B-9A1B-3991-2A8C-B17991AA659D}" = CCC Help Italian "{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content "{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4 "{6807427D-8D68-4D30-AF5B-0B38F8F948C8}" = Windows Live Writer Resources "{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{6C9F6D23-E9AD-43C9-B43A-011562AAF876}" = Windows Mobile 5.0 SDK R2 for Pocket PC "{6CB36609-E3A6-446C-A3C1-C71E311D2B9C}" = Windows Live Movie Maker "{6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3}" = Microsoft Visual Studio Macro Tools "{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker "{7115EEBC-DA7B-434C-B81C-EA5B26EA9A94}" = Windows Live Writer Resources "{71A81378-79D5-40CC-9BDC-380642D1A87F}" = Windows Live Writer "{71C95134-F6A9-45E7-B7B3-07CA6012BF2A}" = Windows Live Mesh "{7327080F-6673-421F-BBD9-B618F357EEB3}" = Windows Live UX Platform Language Pack "{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4 "{75AEE162-2DAF-C1F2-E1D8-A8F4ED04DA1A}" = CCC Help Greek "{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack "{77D28FF5-242F-488A-8215-937D6A4D69E0}" = Adobe AIR "{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update "{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh "{793D1D88-6141-43DE-BE58-59BCE31B4090}" = Adobe Flash CS4 Extension - Flash Lite STI en "{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}" = Skype™ 6.16 "{7B982EBD-D017-4527-BF1A-FC489EC6B100}" = Windows Live 照片库 "{7C2A3479-A5A0-412B-B0E6-6D64CBB9B251}" = Windows Live Photo Common "{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files "{7D09972F-4B4D-8A48-7C39-C16BDC4551ED}" = CCC Help French "{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials "{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{84A411F9-40A5-4CDA-BF46-E09FBB2BC313}" = Windows Live Essentials "{85373DA7-834E-4850-8AF5-1D99F7526857}" = Windows Live Photo Common "{8545F9B8-12CD-01A2-4739-F4D0012C80FD}" = CCC Help Thai "{85467CBC-7A39-33C9-8940-D72D9269B84F}" = Microsoft Visual F# 2.0 Runtime "{861B1145-7762-4794-B40C-3FF0A389DFE6}" = Windows Live Photo Gallery "{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime "{90120000-0021-0000-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer 2007 "{90120000-0021-0409-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer MUI (English) 2007 "{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007 "{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007 "{903EDF14-4E28-4463-AA5E-4AEE71C0263B}" = Windows Live Movie Maker "{92429C8B-86E2-176F-FB06-8F3A3C847DD3}" = CCC Help German "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4 "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{9656F3AC-6BA9-43F0-ABED-F214B5DAB27B}" = Windows Mobile 5.0 SDK R2 for Smartphone "{989B6566-DC9B-D79D-7C7A-688727165852}" = CCC Help Finnish "{99AF0582-482B-4E5E-BB11-675354BF5E77}_is1" = Qiqqa "{9BACB89D-98DA-E204-F904-6776079F1382}" = Catalyst Control Center InstallProxy "{A0B91308-6666-4249-8FF6-1E11AFD75FE1}" = Windows Live Mail "{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh "{A199DB88-E22D-4CE7-90AC-B8BE396D7BF4}" = Windows Live Movie Maker "{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common "{A6EC82A0-1414-475D-8AFD-469089F3080D}" = Adobe Contribute CS4 "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer "{AB0B2113-5B96-4B95-8AD1-44613384911F}" = Windows Live Mesh "{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package "{AC41D924-8C68-4BD5-A7A1-0AE4176C31A6}" = Crystal Reports for Visual Studio "{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Fran鏰is, Deutsch "{AF01B90A-D25C-4F60-AECD-6EEDF509DC11}" = Windows Live Mesh "{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4 "{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4 "{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content "{B29AD377-CC12-490A-A480-1452337C618D}" = Connect "{B33B61FE-701F-425F-98AB-2B85725CBF68}" = Windows Live Photo Common "{B3BE54A4-8DFE-4593-8E66-56AB7133B812}" = Windows Live Writer "{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4 "{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 "{B9F4561A-924D-4510-A85A-BB0960C338CB}" = Adobe Asset Services CS4 "{BA3BE09C-22AD-4440-306F-6B5A7D7B5207}" = CCC Help Korean "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{BC0464FA-A0BA-3E38-85BF-DC5B3A401F48}" = Microsoft Visual Studio 2010 Ultimate - ENU "{BC9DBD2A-4E6A-BFCD-8476-58747501EA7A}" = CCC Help Chinese Standard "{BD695C2F-3EA0-4DA4-92D5-154072468721}" = Windows Live Fotoğraf Galerisi "{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter "{BEF1CD9C-F502-BC2C-9561-7E14DA937AD5}" = CCC Help Portuguese "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}" = Acrobat.com "{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common "{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{CF474BB3-BD31-8C60-6938-6F5597A254EC}" = Catalyst Control Center "{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D299197D-CDEA-41A6-A363-F532DE4114FD}" = Windows Live UX Platform Language Pack "{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4 "{D49DBA4B-8ED1-E679-D000-BE301724FE6E}" = CCC Help Chinese Traditional "{D6CBB3B2-F510-483D-AE0D-1CF3F43CF1EE}" = Windows Live Writer Resources "{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}" = WCF RIA Services V1.0 SP1 "{DC0BE1EC-8CD8-267E-0FC5-82605ED0045F}" = CCC Help Spanish "{DDC1E1BD-7615-4186-89E1-F5F43F9B6491}" = Windows Live Movie Maker "{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources "{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4 "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{DF71ABBB-B834-41C0-BB58-80B0545D754C}" = Windows Live UX Platform Language Pack "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}" = Asmedia ASM104x USB 3.0 Host Controller Driver "{E62E0550-C098-43A2-B54B-03FB1E634483}" = Windows Live Writer "{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources "{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live "{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup "{EB9C342B-A71C-F09C-0066-9AA565724980}" = CCC Help Russian "{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera "{ED780CA9-0687-3C12-B439-3369F224941F}" = Microsoft Visual Studio 2010 Service Pack 1 "{EDDF99D9-9FE3-4871-A7DB-D1522C51EE9A}" = Microsoft .NET Compact Framework 2.0 SP2 "{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby "{EEF99142-3357-402C-B298-DEC303E12D92}" = Windows Live 影像中心 "{EF7EAB13-46FC-49DD-8E3C-AAF8A286C5BB}" = Windows Live 程式集 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F52C5BE7-3F57-464E-8A54-908402E43CE8}" = Windows Live Writer Resources "{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4 "{F7A46527-DF1F-4B0F-9637-98547E189442}" = Windows Live Galeria de Fotos "{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update "{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs "{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}" = معرض صور Windows Live "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials "{FF105207-8423-4E13-B0B1-50753170B245}" = Windows Live Movie Maker "3309-7404-0599-8908" = yEd Graph Editor 3.12.2 "360安全卫士" = 360安全卫士 "360手机助手" = 360手机助手 "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player 14 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 14 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.6 "Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection "Asus Vibe2.0" = AsusVibe2.0 "AsusScr_K Series_ENG" = AsusScr_K Series_ENG "com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player "com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com "Efficient Diary_is1" = Efficient Diary 3.62 "FileZilla Client" = FileZilla Client 3.8.1 "Google Chrome" = Google Chrome "LINE" = LINE "Microsoft Visual Studio 2010 Service Pack 1" = Microsoft Visual Studio 2010 Service Pack 1 "Microsoft Visual Studio 2010 Ultimate - ENU" = Microsoft Visual Studio 2010 Ultimate - ENU "Microsoft Visual Studio Macro Tools" = Microsoft Visual Studio Macro Tools "Notepad++" = Notepad++ "PowerWordDict" = 金山词霸2012 "RMVB Player_is1" = RMVB Player 1.0.3 "TeamViewer 9" = TeamViewer 9 "Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime "VisualWebDeveloper" = Microsoft Visual Studio Web Authoring Component "XMind_is1" = XMind 2013 (v3.4.1) "美图秀秀" = 美图秀秀 3.9.6 [color=#E56717]========== HKEY_USERS Uninstall List ==========[/color] [HKEY_USERS\S-1-5-21-2680072073-3876680634-2631007406-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Dropbox" = Dropbox "Spotify" = Spotify [color=#E56717]========== Last 20 Event Log Errors ==========[/color] [ Application Events ] Error - 26-Jul-14 3:30:03 PM | Computer Name = name-PC | Source = Application Error | ID = 1000 Description = Faulting application name: Service_KMS.exe, version: 13.1.0.0, time stamp: 0x5313ef48 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0x00000000 Fault offset: 0x000007fe998f0368 Faulting process id: 0x834 Faulting application start time: 0x01cfa907e8b499ca Faulting application path: C:\Program Files\KMSpico\Service_KMS.exe Faulting module path: unknown Report Id: 3d661eae-14fb-11e4-a1fd-14dae9aca8e4 Error - 26-Jul-14 4:04:28 PM | Computer Name = name-PC | Source = Application Error | ID = 1000 Description = Faulting application name: Service_KMS.exe, version: 13.1.0.0, time stamp: 0x5313ef48 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0x00000000 Fault offset: 0x000007fe98a30368 Faulting process id: 0x848 Faulting application start time: 0x01cfa90cb86373f2 Faulting application path: C:\Program Files\KMSpico\Service_KMS.exe Faulting module path: unknown Report Id: 0c3b2f5c-1500-11e4-b641-14dae9aca8e4 Error - 26-Jul-14 11:01:00 PM | Computer Name = name-PC | Source = Application Error | ID = 1000 Description = Faulting application name: Service_KMS.exe, version: 13.1.0.0, time stamp: 0x5313ef48 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0x00000000 Fault offset: 0x000007fe98ad0368 Faulting process id: 0x8ec Faulting application start time: 0x01cfa946ee8ea5bb Faulting application path: C:\Program Files\KMSpico\Service_KMS.exe Faulting module path: unknown Report Id: 3cb54b87-153a-11e4-9085-14dae9aca8e4 Error - 27-Jul-14 12:36:39 AM | Computer Name = name-PC | Source = Application Error | ID = 1000 Description = Faulting application name: Service_KMS.exe, version: 13.1.0.0, time stamp: 0x5313ef48 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0x00000000 Fault offset: 0x000007fe99670368 Faulting process id: 0x838 Faulting application start time: 0x01cfa954465d2fee Faulting application path: C:\Program Files\KMSpico\Service_KMS.exe Faulting module path: unknown Report Id: 995e42f9-1547-11e4-9fb6-14dae9aca8e4 Error - 27-Jul-14 12:49:45 AM | Computer Name = name-PC | Source = Application Error | ID = 1000 Description = Faulting application name: Service_KMS.exe, version: 13.1.0.0, time stamp: 0x5313ef48 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0x00000000 Fault offset: 0x000007fe99c20368 Faulting process id: 0x768 Faulting application start time: 0x01cfa95622866528 Faulting application path: C:\Program Files\KMSpico\Service_KMS.exe Faulting module path: unknown Report Id: 6d759baa-1549-11e4-82d6-14dae9aca8e4 Error - 27-Jul-14 1:21:10 AM | Computer Name = name-PC | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 27-Jul-14 1:22:02 AM | Computer Name = name-PC | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 27-Jul-14 1:22:03 AM | Computer Name = name-PC | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 27-Jul-14 1:22:03 AM | Computer Name = name-PC | Source = .NET Runtime Optimization Service | ID = 1101 Description = Error - 27-Jul-14 1:22:04 AM | Computer Name = name-PC | Source = .NET Runtime Optimization Service | ID = 1101 Description = [ Media Center Events ] Error - 14-Apr-12 3:17:33 AM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 3:17:30 PM - Error connecting to the internet. 3:17:30 PM - Unable to contact server.. Error - 16-Apr-12 10:41:31 PM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 10:41:26 AM - Error connecting to the internet. 10:41:26 AM - Unable to contact server.. Error - 16-Apr-12 11:41:39 PM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 11:41:39 AM - Error connecting to the internet. 11:41:39 AM - Unable to contact server.. Error - 18-Apr-12 12:49:42 AM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 12:49:35 PM - Error connecting to the internet. 12:49:35 PM - Unable to contact server.. Error - 18-Apr-12 1:49:50 AM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 1:49:49 PM - Error connecting to the internet. 1:49:49 PM - Unable to contact server.. Error - 18-Apr-12 3:15:14 PM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 3:15:11 AM - Error connecting to the internet. 3:15:11 AM - Unable to contact server.. Error - 18-Apr-12 4:15:32 PM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 4:15:32 AM - Error connecting to the internet. 4:15:32 AM - Unable to contact server.. Error - 18-Apr-12 8:11:57 PM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 8:11:54 AM - Error connecting to the internet. 8:11:54 AM - Unable to contact server.. Error - 25-Apr-12 12:43:58 AM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 12:43:58 PM - Error connecting to the internet. 12:43:58 PM - Unable to contact server.. Error - 25-Apr-12 12:44:07 AM | Computer Name = name-PC | Source = MCUpdate | ID = 0 Description = 12:44:04 PM - Error connecting to the internet. 12:44:04 PM - Unable to contact server.. [ System Events ] Error - 27-Jul-14 12:37:24 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7034 Description = The Service KMSELDI service terminated unexpectedly. It has done this 1 time(s). Error - 27-Jul-14 12:48:36 AM | Computer Name = name-PC | Source = DCOM | ID = 10010 Description = Error - 27-Jul-14 12:49:20 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7000 Description = The Yes Go Protocol Driver service failed to start due to the following error: %%2 Error - 27-Jul-14 12:49:56 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7034 Description = The Service KMSELDI service terminated unexpectedly. It has done this 1 time(s). Error - 27-Jul-14 12:56:05 AM | Computer Name = name-PC | Source = DCOM | ID = 10010 Description = Error - 27-Jul-14 12:56:50 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7000 Description = The Yes Go Protocol Driver service failed to start due to the following error: %%2 Error - 27-Jul-14 12:57:05 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7034 Description = The Service KMSELDI service terminated unexpectedly. It has done this 1 time(s). Error - 27-Jul-14 1:02:34 AM | Computer Name = name-PC | Source = DCOM | ID = 10010 Description = Error - 27-Jul-14 1:03:11 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7000 Description = The Yes Go Protocol Driver service failed to start due to the following error: %%2 Error - 27-Jul-14 1:03:36 AM | Computer Name = name-PC | Source = Service Control Manager | ID = 7034 Description = The Service KMSELDI service terminated unexpectedly. It has done this 1 time(s). < End of report >