[erockk]

Microsoft Security Essentials Wont open and everytime i search for something i sometimes am redirected to another site that i didnt want.
I have uninstalled Microsoft Security Essentials after recently having maliware on my computer that i removed with malibites. please help


OTL logfile created on: 5/14/2011 1:10:23 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Eric\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 52.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 283.04 Gb Total Space | 96.71 Gb Free Space | 34.17% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 14.90 Gb Free Space | 99.35% Space Free | Partition Type: NTFS

Computer Name: ERIC-PC | User Name: Eric | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/05/14 13:09:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Eric\Desktop\OTL.exe
PRC - [2011/05/05 13:17:55 | 003,406,336 | ---- | M] (Jumi Technologies) -- C:\Program Files\Jumi\jumi.exe
PRC - [2010/12/29 15:42:24 | 001,175,556 | ---- | M] (NCH Software) -- C:\Program Files\NCH Software\BroadCam\broadcam.exe
PRC - [2010/11/11 13:55:56 | 006,351,600 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Zune\ZuneNss.exe
PRC - [2010/11/11 13:55:46 | 000,159,472 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Zune\ZuneLauncher.exe
PRC - [2010/06/03 16:28:16 | 000,368,128 | ---- | M] (TODO: <Company name>) -- C:\Program Files\Jumi\JumiPortForwarder.exe
PRC - [2010/05/20 15:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe
PRC - [2010/05/17 17:03:14 | 000,105,632 | ---- | M] (Corel) -- C:\Program Files\Common Files\Corel\Standby\Standby.exe
PRC - [2010/02/12 21:53:32 | 000,072,704 | ---- | M] (Creative Labs) -- C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe
PRC - [2009/12/20 01:00:00 | 006,095,504 | ---- | M] (MySQL AB) -- C:\xampp\mysql\bin\mysqld.exe
PRC - [2009/12/20 01:00:00 | 001,029,776 | ---- | M] (FileZilla Project) -- C:\xampp\FileZillaFTP\FileZilla Server.exe
PRC - [2009/12/20 01:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) -- C:\xampp\apache\bin\httpd.exe
PRC - [2009/09/10 16:12:10 | 000,185,632 | ---- | M] (Protexis Inc.) -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
PRC - [2009/04/11 02:28:15 | 000,117,248 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
PRC - [2009/04/11 02:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008/09/16 12:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
PRC - [2007/05/06 18:11:36 | 000,094,208 | ---- | M] (SigmaTel, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2007/05/06 18:10:44 | 000,405,504 | ---- | M] (SigmaTel, Inc.) -- C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe
PRC - [2006/11/27 10:14:52 | 000,180,224 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe
PRC - [2006/11/09 11:19:14 | 000,204,800 | ---- | M] (Creative Technology Ltd) -- C:\Program Files\Creative\MediaSource5\Go\CTCMSGoU.exe
PRC - [2006/11/02 08:35:35 | 000,176,128 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wpcumi.exe
PRC - [2006/11/02 05:45:59 | 000,215,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\WindowsMobile\wmdSync.exe


========== Modules (SafeList) ==========

MOD - [2011/05/14 13:09:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Eric\Desktop\OTL.exe
MOD - [2010/08/31 11:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - [2011/04/20 15:20:53 | 000,867,080 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/12/29 15:42:24 | 001,175,556 | ---- | M] (NCH Software) [Auto | Running] -- C:\Program Files\NCH Software\BroadCam\broadcam.exe -- (BroadCamService)
SRV - [2010/11/11 13:57:04 | 000,268,528 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\WMZuneComm.exe -- (WMZuneComm)
SRV - [2010/11/11 13:57:02 | 000,444,656 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Zune\ZuneWlanCfgSvc.exe -- (ZuneWlanCfgSvc)
SRV - [2010/11/11 13:55:56 | 006,351,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Zune\ZuneNss.exe -- (ZuneNetworkSvc)
SRV - [2010/06/25 13:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)
SRV - [2010/05/20 15:27:24 | 000,139,632 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc)
SRV - [2010/04/21 13:46:17 | 000,373,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2010/04/05 20:08:17 | 000,068,096 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe -- (Macromedia Licensing Service)
SRV - [2010/02/12 21:53:32 | 000,072,704 | ---- | M] (Creative Labs) [Auto | Running] -- C:\Program Files\Common Files\Creative Labs Shared\Service\CreativeLicensing.exe -- (Creative Labs Licensing Service)
SRV - [2009/12/20 01:00:00 | 006,095,504 | ---- | M] (MySQL AB) [Auto | Running] -- C:\xampp\mysql\bin\mysqld.exe -- (MySQL)
SRV - [2009/12/20 01:00:00 | 001,029,776 | ---- | M] (FileZilla Project) [Auto | Running] -- C:\xampp\FileZillaFTP\FileZilla server.exe -- (FileZilla Server)
SRV - [2009/12/20 01:00:00 | 000,029,416 | ---- | M] (Apache Software Foundation) [Auto | Running] -- C:\xampp\apache\bin\httpd.exe -- (Apache2.2)
SRV - [2009/09/10 16:12:10 | 000,185,632 | ---- | M] (Protexis Inc.) [Auto | Running] -- c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe -- (PSI_SVC_2)
SRV - [2009/04/11 02:28:17 | 000,052,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\System32\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2008/09/16 12:03:18 | 000,169,312 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor7.0)
SRV - [2008/01/19 03:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008/01/19 03:36:49 | 000,365,568 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2008/01/19 03:36:15 | 000,167,936 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007/05/06 18:11:36 | 000,094,208 | ---- | M] (SigmaTel, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)


========== Driver Services (SafeList) ==========

DRV - [2010/06/25 13:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2010/06/03 11:07:18 | 000,013,112 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\jumi.sys -- (jumi)
DRV - [2010/05/20 15:27:26 | 001,961,072 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VX1000.sys -- (VX1000)
DRV - [2009/11/26 01:06:34 | 000,034,384 | ---- | M] (Screaming Bee LLC) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ScreamingBAudio.sys -- (SCREAMINGBDRIVER)
DRV - [2009/04/11 00:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/02/24 18:42:14 | 000,116,736 | ---- | M] (MagicISO, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mcdbus.sys -- (mcdbus)
DRV - [2008/09/15 17:50:16 | 000,013,824 | ---- | M] (Blackmagic Design) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\deckaud.sys -- (BMDDeckLinkAudio)
DRV - [2008/09/15 17:50:06 | 000,184,320 | ---- | M] (Blackmagic Design) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Intensity.sys -- (DeckLink)
DRV - [2007/09/14 23:16:22 | 003,151,872 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2007/05/06 18:12:02 | 000,326,656 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007/04/13 14:22:56 | 000,228,224 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel®
DRV - [2006/12/12 12:16:06 | 000,022,528 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emAudio.sys -- (emAudio)
DRV - [2005/12/21 10:14:52 | 000,100,957 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emDevice.sys -- (DCamUSBEMPIA)
DRV - [2005/12/21 10:14:52 | 000,005,245 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emFilter.sys -- (FiltUSBEMPIA)
DRV - [2005/12/21 10:14:52 | 000,004,493 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emScan.sys -- (ScanUSBEMPIA)
DRV - [2005/09/24 00:18:32 | 000,171,520 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\MarvinBus.sys -- (MarvinBus)
DRV - [2003/08/11 10:07:46 | 000,014,604 | ---- | M] (Padus, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pfc.sys -- (pfc)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=;ftp=;https=;

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AIM Search"
FF - prefs.js..browser.search.defaultthis.engineName: "NCH Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2117678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.param.yahoo-fr: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-ytbm"
FF - prefs.js..browser.search.param.yahoo-type: "${8}"
FF - prefs.js..browser.search.selectedEngine: "NCH Customized Web Search"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "facebook.com"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: support@auto-hide-ip.com:1.0
FF - prefs.js..extensions.enabledItems: {c2db4fe6-8409-45ce-8010-189a7b5cce86}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:2.0.2
FF - prefs.js..keyword.URL: "http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2706&invocationType=tb50-ff-aim-ab-en-us&query="
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.type: 0


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011/04/11 01:01:03 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011/04/11 01:01:03 | 000,000,000 | ---D | M]

[2010/01/10 01:52:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Eric\AppData\Roaming\Mozilla\Extensions
[2011/04/27 18:30:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\extensions
[2010/06/27 14:46:44 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010/12/24 12:02:39 | 000,000,000 | ---D | M] (NCH Toolbar) -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\extensions\{c2db4fe6-8409-45ce-8010-189a7b5cce86}
[2011/04/22 13:11:50 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}
[2010/12/12 11:59:28 | 000,000,000 | ---D | M] (Auto Hide IP) -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\extensions\support@auto-hide-ip.com
[2010/01/10 22:13:20 | 000,004,554 | ---- | M] () -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\searchplugins\aim-search.xml
[2010/11/23 13:03:08 | 000,000,909 | ---- | M] () -- C:\Users\Eric\AppData\Roaming\Mozilla\Firefox\Profiles\jktgai99.default\searchplugins\conduit.xml
[2011/05/01 12:53:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010/06/26 12:21:05 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/11/27 12:16:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010/09/15 05:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

O1 HOSTS File: ([2011/05/12 22:39:52 | 000,001,305 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O1 - Hosts: 127.0.0.1 http://www.marajayjuana.dyndns.org
O1 - Hosts: 192.168.1.141 http://www.marajayjuana.dyndns.org
O1 - Hosts: 24.189.60.32 http://www.marajayjuana.dyndns.org
O1 - Hosts: 127.0.0.1 www.marajayjuana.dyndns.org
O1 - Hosts: 192.168.1.141 www.marajayjuana.dyndns.org
O1 - Hosts: 24.189.60.32 www.marajayjuana.dyndns.org
O1 - Hosts: 127.0.0.1 http://marajayjuana.dyndns.org
O1 - Hosts: 192.168.1.141 http://marajayjuana.dyndns.org
O1 - Hosts: 24.189.60.32 http://marajayjuana.dyndns.org
O1 - Hosts: 127.0.0.1 marajayjuana.dyndns.org
O1 - Hosts: 192.168.1.141 marajayjuana.dyndns.org
O1 - Hosts: 24.189.60.32 marajayjuana.dyndns.org
O1 - Hosts: 127.0.0.1 activate.adobe.com
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [Blackmagic CheckVersion PCI] C:\Program Files\Blackmagic Design\Blackmagic Intensity\CheckVersionPCI.exe (Blackmagic Design)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\Program Files\SigmaTel\C-Major Audio\WDM\sttray.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [Standby] c:\Program Files\Common Files\Corel\Standby\Standby.exe (Corel)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe ()
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [USB2Check] C:\Windows\System32\PCLECoInst.dll (Pinnacle Systems)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\SBAudigy\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [WPCUMI] C:\Windows\System32\wpcumi.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Creative MediaSource Go] C:\Program Files\Creative\MediaSource5\Go\CTCMSGoU.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [JumiController] C:\Program Files\Jumi\jumi.exe (Jumi Technologies)
O4 - HKCU..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Eric\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O24 - Desktop BackupWallPaper: C:\Users\Eric\AppData\Roaming\Microsoft\Windows Photo Gallery\Windows Photo Gallery Wallpaper.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 17:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/05/14 13:09:56 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Eric\Desktop\OTL.exe
[2011/05/14 13:02:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zune
[2011/05/14 13:00:44 | 000,000,000 | ---D | C] -- C:\8b41ecf34ea0e5a1d9958eb2
[2011/05/14 12:57:38 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011/05/14 12:49:40 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011/05/14 12:06:50 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/05/14 11:59:10 | 000,000,000 | ---D | C] -- C:\Windows\en
[2011/05/14 11:55:44 | 000,000,000 | ---D | C] -- C:\Users\Eric\AppData\Local\Windows Live
[2011/05/14 11:55:10 | 000,754,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2011/05/14 11:55:00 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/05/14 11:55:00 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011/05/14 11:55:00 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011/05/14 11:55:00 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011/05/14 11:55:00 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011/05/14 11:55:00 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011/05/14 11:55:00 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/05/14 11:55:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011/05/14 11:54:59 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011/05/14 11:54:59 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/05/14 11:54:59 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011/05/14 11:54:59 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011/05/14 11:54:59 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011/05/14 11:54:59 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/05/14 11:54:59 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011/05/14 11:54:59 | 000,420,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011/05/14 11:54:59 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/05/14 11:54:59 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011/05/14 11:54:59 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011/05/14 11:54:59 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/05/14 11:54:59 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011/05/14 11:54:59 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011/05/14 11:54:59 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011/05/14 11:54:59 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011/05/14 11:54:59 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011/05/14 11:54:59 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011/05/14 11:54:59 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/05/14 11:54:59 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011/05/14 11:54:59 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011/05/14 11:54:59 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011/05/14 11:54:59 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011/05/14 11:54:59 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011/05/14 11:54:59 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011/05/14 11:54:59 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011/05/14 11:54:59 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011/05/14 11:54:59 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011/05/14 11:54:59 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011/05/14 11:54:59 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011/05/14 11:54:58 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011/05/13 17:51:00 | 000,000,000 | ---D | C] -- C:\Users\Eric\AppData\Roaming\Malwarebytes
[2011/05/13 17:50:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011/05/13 14:46:08 | 000,000,000 | ---D | C] -- C:\Windows\Sun
[2011/05/12 14:39:30 | 000,000,000 | ---D | C] -- C:\Users\Eric\AppData\Roaming\Opera
[2011/05/06 03:01:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
[2011/05/01 12:55:35 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2011/04/28 18:25:49 | 000,000,000 | ---D | C] -- C:\Users\Eric\Desktop\MaraJayJuana_Gtag_Mod_Package
[2011/04/26 20:22:21 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Apphlpdm.dll
[2011/04/26 20:22:20 | 004,240,384 | ---- | C] (Microsoft) -- C:\Windows\System32\GameUXLegacyGDFs.dll
[2011/04/26 20:22:16 | 000,876,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2011/04/25 22:58:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
[2011/04/24 23:45:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hex Workshop v6
[2011/04/24 23:45:20 | 000,000,000 | ---D | C] -- C:\Program Files\BreakPoint Software
[2011/04/24 17:01:20 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SourceTec
[2011/04/24 17:01:16 | 000,000,000 | ---D | C] -- C:\Windows\System32\languages
[2011/04/24 17:01:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SourceTec
[2011/04/24 17:00:58 | 001,184,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc1dmod.dll
[2011/04/24 17:00:58 | 000,438,272 | ---- | C] (Gabest) -- C:\Windows\System32\MatroskaSplitter.ax
[2011/04/24 17:00:58 | 000,217,088 | ---- | C] (-) -- C:\Windows\System32\CoreFLACDecoder.ax
[2011/04/24 17:00:57 | 000,434,176 | ---- | C] (Gabest) -- C:\Windows\System32\Mpeg2DecFilter.ax
[2011/04/24 17:00:57 | 000,143,360 | ---- | C] (SourceTec) -- C:\Windows\System32\stQTSource.ax
[2011/04/24 17:00:57 | 000,000,000 | ---D | C] -- C:\Program Files\SourceTec
[2011/04/24 16:41:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\E.M. Total Video Converter Command Line
[2011/04/24 16:41:03 | 000,000,000 | ---D | C] -- C:\Program Files\E.M. TVCC
[2011/04/24 16:22:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\GeoVid
[2011/04/24 16:22:27 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsetup.dll
[2011/04/20 23:03:09 | 000,000,000 | ---D | C] -- C:\Users\Eric\Desktop\misc
[2011/04/20 16:28:16 | 000,000,000 | ---D | C] -- C:\Users\Eric\AppData\Roaming\No Company Name
[2011/04/20 15:18:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PX Storage Engine
[2011/04/20 02:41:18 | 000,000,000 | ---D | C] -- C:\Users\Eric\Documents\Adobe
[2011/04/20 02:39:14 | 000,014,604 | ---- | C] (Padus, Inc.) -- C:\Windows\System32\drivers\pfc.sys
[2011/04/20 02:25:48 | 000,000,000 | ---D | C] -- C:\ProgramData\FLEXnet
[2011/04/20 02:25:13 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Macrovision Shared
[2011/04/20 02:22:22 | 000,000,000 | ---D | C] -- C:\Windows\Fonts\Fonts
[2011/04/20 02:21:13 | 000,072,440 | ---- | C] (Sonic Solutions) -- C:\Windows\System32\pxhpinst.exe
[2011/04/20 02:11:34 | 000,000,000 | ---D | C] -- C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MagicDisc
[2011/04/20 02:11:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagicDisc
[2011/04/20 02:11:01 | 000,116,736 | ---- | C] (MagicISO, Inc.) -- C:\Windows\System32\drivers\mcdbus.sys
[2011/04/20 02:10:59 | 000,000,000 | ---D | C] -- C:\Program Files\MagicDisc
[2011/04/20 00:27:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs
[2011/04/20 00:27:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
[2011/04/19 12:03:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
[2011/04/19 12:03:36 | 000,000,000 | ---D | C] -- C:\Program Files\WinPcap
[2011/04/19 12:03:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cain
[2011/04/19 12:03:26 | 000,000,000 | ---D | C] -- C:\Program Files\Cain
[2011/04/15 12:07:21 | 000,292,864 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011/04/15 12:07:20 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011/04/15 12:07:10 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42u.dll
[2011/04/15 12:07:09 | 001,136,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc42.dll
[2011/04/15 12:07:05 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscacheugc.exe
[2011/04/15 12:07:03 | 002,041,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/05/14 13:12:13 | 000,676,732 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011/05/14 13:12:13 | 000,129,544 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011/05/14 13:09:48 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Eric\Desktop\OTL.exe
[2011/05/14 13:05:59 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011/05/14 13:05:58 | 000,003,664 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011/05/14 13:05:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011/05/14 13:02:09 | 000,000,838 | ---- | M] () -- C:\Users\Public\Desktop\Zune.lnk
[2011/05/14 12:48:59 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2011/05/14 12:38:43 | 000,000,943 | ---- | M] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[2011/05/14 12:19:43 | 000,484,992 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011/05/14 11:55:06 | 000,008,798 | ---- | M] () -- C:\Windows\System32\icrav03.rat
[2011/05/14 11:55:06 | 000,001,988 | ---- | M] () -- C:\Windows\System32\ticrf.rat
[2011/05/14 11:55:00 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011/05/14 11:55:00 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2011/05/14 11:55:00 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2011/05/14 11:55:00 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2011/05/14 11:55:00 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2011/05/14 11:55:00 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2011/05/14 11:55:00 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011/05/14 11:55:00 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2011/05/14 11:54:59 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2011/05/14 11:54:59 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011/05/14 11:54:59 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011/05/14 11:54:59 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2011/05/14 11:54:59 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011/05/14 11:54:59 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011/05/14 11:54:59 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2011/05/14 11:54:59 | 000,420,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011/05/14 11:54:59 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011/05/14 11:54:59 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2011/05/14 11:54:59 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011/05/14 11:54:59 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011/05/14 11:54:59 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2011/05/14 11:54:59 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2011/05/14 11:54:59 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2011/05/14 11:54:59 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2011/05/14 11:54:59 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2011/05/14 11:54:59 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2011/05/14 11:54:59 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011/05/14 11:54:59 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2011/05/14 11:54:59 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2011/05/14 11:54:59 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2011/05/14 11:54:59 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2011/05/14 11:54:59 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2011/05/14 11:54:59 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2011/05/14 11:54:59 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2011/05/14 11:54:59 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011/05/14 11:54:59 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2011/05/14 11:54:59 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2011/05/14 11:54:59 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011/05/14 11:54:59 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011/05/14 11:54:58 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2011/05/14 11:15:00 | 000,000,904 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2851723847-1445177766-924000605-1000UA.job
[2011/05/13 20:15:00 | 000,000,852 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2851723847-1445177766-924000605-1000Core.job
[2011/05/13 17:46:16 | 000,145,920 | ---- | M] () -- C:\Users\Eric\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/05/13 14:44:26 | 000,143,360 | RHS- | M] () -- C:\Windows\System32\trkwksc.dll
[2011/05/09 16:15:31 | 000,002,037 | ---- | M] () -- C:\Users\Eric\Desktop\Google Chrome.lnk
[2011/05/09 16:15:31 | 000,001,999 | ---- | M] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2011/04/24 23:13:59 | 000,000,000 | ---- | M] () -- C:\Users\Eric\TVCC
[2011/04/24 17:01:22 | 000,001,074 | ---- | M] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Sothink FLV Player.lnk
[2011/04/24 17:01:16 | 000,041,317 | ---- | M] () -- C:\Windows\System32\unins000.dat
[2011/04/24 17:01:14 | 000,691,717 | ---- | M] () -- C:\Windows\System32\unins000.exe
[2011/04/24 17:01:11 | 000,001,023 | ---- | M] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Sothink Video Encoder for Adobe Flash.lnk
[2011/04/21 13:57:33 | 000,001,777 | ---- | M] () -- C:\Users\Eric\Desktop\photoshop cs2.lnk
[2011/04/20 20:43:05 | 136,968,197 | ---- | M] () -- C:\Users\Eric\Desktop\cain.wmv
[2011/04/20 15:19:56 | 000,002,042 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Premiere Elements 8.0.lnk
[2011/04/20 02:25:05 | 000,001,078 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Photoshop Elements 7.0.lnk
[2011/04/20 02:20:08 | 000,072,440 | ---- | M] (Sonic Solutions) -- C:\Windows\System32\pxhpinst.exe
[2011/04/20 02:11:34 | 000,000,762 | ---- | M] () -- C:\Users\Eric\Desktop\MagicDisc.lnk
[2011/04/20 00:27:49 | 000,000,939 | ---- | M] () -- C:\Users\Public\Desktop\VideoPad Video Editor.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/05/14 11:58:55 | 000,001,158 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Movie Maker.lnk
[2011/05/14 11:58:45 | 000,001,227 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Photo Gallery.lnk
[2011/05/14 11:58:03 | 000,001,037 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
[2011/05/14 11:54:59 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2011/05/13 14:44:26 | 000,143,360 | RHS- | C] () -- C:\Windows\System32\trkwksc.dll
[2011/04/24 23:13:59 | 000,000,000 | ---- | C] () -- C:\Users\Eric\TVCC
[2011/04/24 17:01:22 | 000,001,074 | ---- | C] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Sothink FLV Player.lnk
[2011/04/24 17:01:16 | 000,001,708 | ---- | C] () -- C:\Windows\System32\openIE.js
[2011/04/24 17:01:15 | 000,188,416 | ---- | C] () -- C:\Windows\System32\ff_theora.dll
[2011/04/24 17:01:15 | 000,118,784 | ---- | C] () -- C:\Windows\System32\ff_realaac.dll
[2011/04/24 17:01:14 | 000,691,717 | ---- | C] () -- C:\Windows\System32\unins000.exe
[2011/04/24 17:01:14 | 000,041,317 | ---- | C] () -- C:\Windows\System32\unins000.dat
[2011/04/24 17:01:11 | 000,001,023 | ---- | C] () -- C:\Users\Eric\Application Data\Microsoft\Internet Explorer\Quick Launch\Sothink Video Encoder for Adobe Flash.lnk
[2011/04/21 13:57:30 | 000,001,777 | ---- | C] () -- C:\Users\Eric\Desktop\photoshop cs2.lnk
[2011/04/20 20:32:01 | 136,968,197 | ---- | C] () -- C:\Users\Eric\Desktop\cain.wmv
[2011/04/20 15:19:56 | 000,002,054 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Elements 8.0.lnk
[2011/04/20 15:19:56 | 000,002,042 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Premiere Elements 8.0.lnk
[2011/04/20 02:25:05 | 000,001,078 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Photoshop Elements 7.0.lnk
[2011/04/20 02:25:05 | 000,000,996 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Elements 7.0.lnk
[2011/04/20 02:11:34 | 000,000,762 | ---- | C] () -- C:\Users\Eric\Desktop\MagicDisc.lnk
[2011/04/20 00:27:49 | 000,000,951 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video Editor.lnk
[2011/04/20 00:27:49 | 000,000,939 | ---- | C] () -- C:\Users\Public\Desktop\VideoPad Video Editor.lnk
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011/03/31 22:48:39 | 001,589,248 | ---- | C] () -- C:\Windows\System32\libmysql_d.dll
[2011/01/31 20:36:40 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011/01/14 20:40:48 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011/01/03 00:59:24 | 000,241,664 | ---- | C] () -- C:\Windows\System32\rtl2.dat
[2010/12/12 11:42:09 | 000,000,242 | ---- | C] () -- C:\ProgramData\Setting.dat
[2010/12/12 11:42:09 | 000,000,022 | ---- | C] () -- C:\Users\Eric\AppData\Roaming\UserFlag.ini
[2010/12/06 09:58:56 | 002,496,715 | ---- | C] () -- C:\Windows\System32\abgx360.exe
[2010/07/12 10:58:23 | 000,209,040 | ---- | C] () -- C:\Windows\System32\IVIresizeW7.dll
[2010/07/12 10:58:23 | 000,204,944 | ---- | C] () -- C:\Windows\System32\IVIresizeA6.dll
[2010/07/12 10:58:23 | 000,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeP6.dll
[2010/07/12 10:58:23 | 000,196,752 | ---- | C] () -- C:\Windows\System32\IVIresizeM6.dll
[2010/07/12 10:58:23 | 000,192,656 | ---- | C] () -- C:\Windows\System32\IVIresizePX.dll
[2010/07/12 10:58:22 | 000,024,720 | ---- | C] () -- C:\Windows\System32\IVIresize.dll
[2010/07/12 00:21:49 | 000,000,088 | RHS- | C] () -- C:\ProgramData\365363BFE1.sys
[2010/07/12 00:21:48 | 000,005,642 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2010/06/25 13:03:12 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2010/06/19 03:05:35 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2010/06/18 11:00:32 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010/06/18 11:00:32 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2010/06/15 12:06:38 | 000,404,992 | ---- | C] () -- C:\Windows\System32\libmplayer.dll
[2010/06/15 12:05:02 | 003,104,256 | ---- | C] () -- C:\Windows\System32\libavcodec.dll
[2010/06/15 11:43:58 | 001,641,574 | ---- | C] () -- C:\Windows\System32\ffmpegmt.dll
[2010/05/24 15:39:50 | 000,204,800 | ---- | C] () -- C:\Windows\System32\ff_kernelDeint.dll
[2010/05/24 15:38:34 | 000,520,192 | ---- | C] () -- C:\Windows\System32\ff_x264.dll
[2010/05/24 15:38:22 | 000,662,016 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010/05/19 16:59:20 | 000,150,528 | ---- | C] () -- C:\Windows\System32\mkx.dll
[2010/05/19 16:59:10 | 000,109,568 | ---- | C] () -- C:\Windows\System32\avi.dll
[2010/05/19 16:59:02 | 000,141,824 | ---- | C] () -- C:\Windows\System32\mp4.dll
[2010/05/19 16:58:52 | 000,123,392 | ---- | C] () -- C:\Windows\System32\ogm.dll
[2010/05/19 16:58:24 | 000,113,152 | ---- | C] () -- C:\Windows\System32\dsmux.exe
[2010/05/19 16:58:18 | 000,154,112 | ---- | C] () -- C:\Windows\System32\ts.dll
[2010/05/19 16:58:08 | 000,249,856 | ---- | C] () -- C:\Windows\System32\dxr.dll
[2010/05/19 16:57:42 | 000,097,792 | ---- | C] () -- C:\Windows\System32\avs.dll
[2010/05/19 16:57:38 | 000,137,728 | ---- | C] () -- C:\Windows\System32\mkv2vfr.exe
[2010/05/19 16:57:26 | 000,093,184 | ---- | C] () -- C:\Windows\System32\avss.dll
[2010/05/19 16:57:20 | 000,358,400 | ---- | C] () -- C:\Windows\System32\gdsmux.exe
[2010/05/19 16:55:40 | 000,080,384 | ---- | C] () -- C:\Windows\System32\mkzlib.dll
[2010/05/19 16:55:36 | 000,024,576 | ---- | C] () -- C:\Windows\System32\mkunicode.dll
[2010/05/12 11:09:06 | 000,007,680 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010/05/11 17:26:52 | 000,204,800 | ---- | C] () -- C:\Windows\System32\TomsMoComp_ff.dll
[2010/05/11 17:22:22 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ff_wmv9.dll
[2010/05/10 18:10:04 | 000,143,360 | ---- | C] () -- C:\Windows\System32\ff_libmad.dll
[2010/05/10 18:09:50 | 000,167,936 | ---- | C] () -- C:\Windows\System32\ff_libdts.dll
[2010/05/10 18:09:42 | 000,054,784 | ---- | C] () -- C:\Windows\System32\ff_liba52.dll
[2010/05/10 18:09:30 | 000,397,312 | ---- | C] () -- C:\Windows\System32\ff_libfaad2.dll
[2010/05/10 18:07:24 | 000,135,168 | ---- | C] () -- C:\Windows\System32\ff_samplerate.dll
[2010/05/10 18:05:28 | 000,102,912 | ---- | C] () -- C:\Windows\System32\ff_tremor.dll
[2010/05/10 18:05:06 | 000,038,400 | ---- | C] () -- C:\Windows\System32\ff_unrar.dll
[2010/05/10 18:03:56 | 000,122,880 | ---- | C] () -- C:\Windows\System32\libmpeg2_ff.dll
[2010/02/25 22:44:09 | 000,000,376 | ---- | C] () -- C:\Windows\ODBC.INI
[2010/02/23 23:34:19 | 000,061,678 | ---- | C] () -- C:\Users\Eric\AppData\Roaming\PFP120JPR.{PB
[2010/02/23 23:34:19 | 000,012,358 | ---- | C] () -- C:\Users\Eric\AppData\Roaming\PFP120JCM.{PB
[2010/02/22 17:09:55 | 000,130,860 | ---- | C] () -- C:\Windows\hpoins18.dat
[2010/02/22 17:08:31 | 000,006,600 | ---- | C] () -- C:\Windows\hpomdl18.dat
[2010/02/12 22:28:52 | 000,000,628 | ---- | C] () -- C:\Windows\System32\PCI_VEN_1102&DEV_FF05&SUBSYS_00001102.ini
[2010/02/12 22:28:50 | 000,101,376 | ---- | C] () -- C:\Windows\System32\APOMngr.dll
[2010/02/12 22:28:50 | 000,066,560 | ---- | C] () -- C:\Windows\System32\CmdRtr.dll
[2010/01/10 01:59:07 | 000,145,920 | ---- | C] () -- C:\Users\Eric\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/01/10 01:53:20 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010/01/10 01:44:13 | 003,107,788 | ---- | C] () -- C:\Windows\System32\atiumdva.dat
[2010/01/10 01:44:13 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2010/01/10 01:44:13 | 000,154,206 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2010/01/10 01:44:13 | 000,081,920 | ---- | C] () -- C:\Windows\System32\ATIODE.exe
[2010/01/10 01:44:13 | 000,040,960 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe
[2010/01/10 01:42:50 | 000,054,784 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2010/01/10 01:42:50 | 000,024,064 | ---- | C] () -- C:\Windows\System32\WLTRYSVC.EXE
[2010/01/10 01:41:00 | 000,001,356 | ---- | C] () -- C:\Users\Eric\AppData\Local\d3d9caps.dat
[2009/08/11 17:21:26 | 000,087,552 | ---- | C] () -- C:\Windows\System32\ac3config.exe
[2009/08/03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009/08/03 15:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009/06/07 12:24:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009/03/17 15:24:06 | 000,015,498 | ---- | C] () -- C:\Windows\VX1000.ini
[2009/01/10 18:15:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\mmfinfo.dll
[2008/11/06 11:37:32 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2007/10/13 05:30:20 | 000,000,137 | ---- | C] () -- C:\Windows\System32\Registration.ini
[2006/11/02 08:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006/11/02 08:47:37 | 000,484,992 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006/11/02 08:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006/11/02 06:33:01 | 000,676,732 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006/11/02 06:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006/11/02 06:33:01 | 000,129,544 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006/11/02 06:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006/11/02 06:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006/11/02 04:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006/11/02 04:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006/11/02 03:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006/11/02 03:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2002/09/18 01:45:00 | 000,119,808 | ---- | C] () -- C:\Windows\lsb_un20.exe

========== Alternate Data Streams ==========

@Alternate Data Stream - 136 bytes -> C:\ProgramData\TEMP:832A886A
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:0B4227B4

< End of report >

[erockk]

heres extras log


OTL Extras logfile created on: 5/14/2011 1:10:23 PM - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Users\Eric\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 52.00% Memory free
6.00 Gb Paging File | 5.00 Gb Available in Paging File | 74.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 283.04 Gb Total Space | 96.71 Gb Free Space | 34.17% Space Free | Partition Type: NTFS
Drive D: | 15.00 Gb Total Space | 14.90 Gb Free Space | 99.35% Space Free | Partition Type: NTFS

Computer Name: ERIC-PC | User Name: Eric | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0173615C-AF1E-4D5F-A1E5-C82E68A0E200}" = lport=20694 | protocol=6 | dir=in | name=website |
"{0181BB57-21F2-4242-AF79-13878D34CD3C}" = rport=10244 | protocol=6 | dir=out | app=system |
"{01A50BCD-F6B0-45DB-B16F-4FC14C499FDB}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{06486B09-C648-4860-A1B4-EFB1EE9C83A3}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{06AB066E-F7BF-492F-BC01-BD0E589BD9C9}" = rport=10244 | protocol=6 | dir=out | app=system |
"{0768665E-DBF3-4570-944A-B8DE0C2E833A}" = lport=2869 | protocol=6 | dir=in | app=system |
"{078CAADA-DAB2-4A41-883F-F91E70B1F515}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{090687E1-8D20-4E70-BFED-B9327E806F54}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{09D6EBF5-6828-4CD6-AF3A-9E694CB4AF8B}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{0BB10D62-FD12-4FB9-96EC-5A0FDCD5C203}" = lport=20694 | protocol=6 | dir=in | name=apache |
"{0EBC1FF1-F116-42BB-BB47-F9A4E8A9DD62}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{101DF0E3-62A3-43C8-8A62-A17154ED5879}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{126B9F5A-D4E2-4A85-87C4-42BA350CBB49}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{12BA3730-C0EC-4DA3-8517-44693185F454}" = lport=138 | protocol=17 | dir=in | app=system |
"{16F69A60-4348-44C0-81CA-FC4B365273ED}" = lport=2869 | protocol=6 | dir=in | app=system |
"{19694279-8ABC-43E5-8DD6-7649753445A4}" = rport=445 | protocol=6 | dir=out | app=system |
"{1E19DD5A-C81A-42A8-9AFE-F78EB0BB9DB2}" = lport=443 | protocol=6 | dir=in | name=oovoo tcp port 443 |
"{24D5E7C5-986F-4E15-8991-F94458DCAC6B}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{28697A45-0A6C-485A-AC8A-17F3974B4279}" = lport=10243 | protocol=6 | dir=in | app=system |
"{2F7AB3E6-2DC4-4E6F-9995-576603AA8039}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{30C1F988-81CD-4C5A-93AA-F7C2DDAE61F3}" = lport=20694 | protocol=17 | dir=in | name=apache |
"{319A972F-39B2-4C4D-8C54-5B03AA0815C9}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{3285A55B-950D-4A11-8FA8-E1A9FE6BE3FC}" = lport=403 | protocol=17 | dir=in | name=apache |
"{3906CCCC-7248-421A-90D6-6C67BCE0F1E2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3CD410BC-BC9C-4903-A082-BF825D98F896}" = lport=4100 | protocol=17 | dir=in | name=upnp router control port |
"{3D292B12-E13D-4E4E-8D2B-B7FED6066ADB}" = lport=139 | protocol=6 | dir=in | app=system |
"{3DF3803E-32A5-4A3C-92C0-412BCFD4031D}" = lport=3784 | protocol=17 | dir=in | name=vent |
"{3EE8C6F6-0078-4A44-ABED-8803E8AD82AD}" = lport=10243 | protocol=6 | dir=in | app=system |
"{40CAE1E7-E4F5-468B-9740-F0C499DE9BE7}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{4157468A-D6F9-41E2-B058-F8FC9032A595}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{458FCADD-60D4-4E18-AA5C-70420B73B619}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{46E22051-CBB6-49EB-BE9A-C4935C620110}" = lport=20694 | protocol=17 | dir=in | name=website |
"{4986EF1E-F362-415F-87A2-2E78637BDA5F}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{52B9769A-703E-47A3-9ABE-D0A82639BC2D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{5420E540-2DF7-489B-A743-633E0ADFFCF7}" = rport=10243 | protocol=6 | dir=out | app=system |
"{54BA55DE-C6D3-49D7-9952-202B9936C3DF}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{575091EB-AA9D-45A0-83AF-3626A5D00596}" = lport=1900 | protocol=17 | dir=in | app=%programfiles%\zune\zune.exe |
"{5802C1D9-A727-4A14-A1F4-9645DACB14A3}" = lport=2869 | protocol=6 | dir=in | app=system |
"{5A483B70-472C-4058-BBB4-08B7C52E6C02}" = rport=139 | protocol=6 | dir=out | app=system |
"{5AE04443-F5C7-410D-A522-43ABE525816C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5B2E2CE5-4A44-411D-AEBF-A348560E1ACC}" = lport=25 | protocol=17 | dir=in | name=smtp |
"{5BB9E9BC-A1B2-4DAB-8D52-EDA0CCAF34B5}" = lport=5720 | protocol=17 | dir=in | name=jumi controller |
"{5EA6017C-363F-4167-9F6B-5993852BE5B3}" = lport=37674 | protocol=17 | dir=in | name=oovoo udp port 37674 |
"{676849FE-229D-4142-8BD0-DDDF2D8F3268}" = lport=3390 | protocol=6 | dir=in | app=system |
"{676B2959-D610-4C28-9DD5-7C3370178FED}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{6BFD46C3-23E2-4205-89FC-6534C8BDC17F}" = lport=86 | protocol=6 | dir=in | name=broadcam video streaming server web server |
"{6D0765D1-DB0C-419C-AF1F-8DB7B4BC1035}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{6E5653CA-4748-4C31-81A6-583B5DB4F970}" = lport=85 | protocol=17 | dir=in | name=website |
"{6F2B7751-AFF9-4ED0-8972-F43CA8620C15}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{7067C22E-9F33-4FCF-89C7-97488D5CB289}" = lport=443 | protocol=6 | dir=in | name=apache |
"{70F9F6D1-164E-4372-A0F0-DB5AE5179EB3}" = rport=138 | protocol=17 | dir=out | app=system |
"{737EFD54-C75D-44D0-BD9E-D21457A6C21E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{7663618D-373B-4451-A52A-F5D108BBFCEF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7B5DF8EF-DC75-490F-9149-7C06D1307917}" = lport=10244 | protocol=6 | dir=in | app=system |
"{7C8F87FC-DA1F-42EE-9CE9-5D692A5DFF30}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{8051D1C7-6D9E-49E0-B13B-D52F16126666}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{806D1231-AAEE-4B07-A7C3-EE4CC7C654BB}" = lport=445 | protocol=6 | dir=in | app=system |
"{84A8CB32-0978-4A2A-A66C-A26B4AB50FA7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{88CED567-F991-41CE-9A76-33C8D140A587}" = lport=137 | protocol=17 | dir=in | app=system |
"{89F938B9-E87E-419C-A3F5-930E84FCB44B}" = rport=10243 | protocol=6 | dir=out | app=system |
"{8C842C7A-0197-4BBD-8043-899655CC3936}" = lport=1900 | protocol=17 | dir=in | name=upnp udp |
"{910D845F-23FE-41B9-BECC-C3AD107A4BEC}" = lport=443 | protocol=17 | dir=in | name=apache |
"{92220672-4823-49A4-BBD1-0CA7902B4D61}" = lport=4100 | protocol=17 | dir=in | name=upnp router control port |
"{92C9ED38-048D-4244-84CE-6FFD3930C907}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9437EF2C-FE33-436C-8F50-CD3AC569732B}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9581B730-4B58-4198-87F7-106AD14ACBB2}" = lport=85 | protocol=6 | dir=in | name=broadwave web server |
"{95B7AE51-2885-4050-BB07-F55137CCCC2C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9F785D6B-7F9D-4603-91E8-741C1AD6E853}" = lport=443 | protocol=17 | dir=in | name=oovoo udp port 443 |
"{A1AA0265-680D-460F-9D44-1CF67B015745}" = lport=10244 | protocol=6 | dir=in | app=system |
"{A697B4B8-6C5B-4C2D-9FE7-807483967C73}" = lport=80 | protocol=17 | dir=in | name=apache |
"{A7AD2D5D-994D-4102-9BA8-271F7E844D22}" = lport=2869 | protocol=6 | dir=in | app=system |
"{A8051641-8F0E-487C-9523-649D9D1828D3}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A91C9851-D3DE-4426-8F9D-B0DA3E3D34D5}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AACFCEAE-46B4-4E42-87CC-2C645979CA92}" = lport=3724 | protocol=6 | dir=in | name=blizzard downloader: 3724 |
"{ACF53D71-0398-4ADA-A385-AA8C6B3E388A}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{AD6FF345-EA07-4132-9685-2EACC9B9FDC8}" = lport=37674 | protocol=6 | dir=in | name=oovoo tcp port 37674 |
"{AF611380-46E0-493B-B04D-A1A061F967CD}" = lport=5720 | protocol=6 | dir=in | name=jumi controller |
"{B08E1394-0D9A-48D3-BEE3-7A93840D696E}" = lport=25 | protocol=6 | dir=in | name=smtp |
"{B0A99BAE-8FC4-42EC-8403-9793572783D0}" = lport=1935 | protocol=6 | dir=in | name=broadcam video streaming server flash video server |
"{B14B2867-119E-43FD-9175-0517D40D9948}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B22CF6F8-2591-480C-9378-9880C88233E1}" = lport=2869 | protocol=6 | dir=in | app=system |
"{B235A694-4276-4CAA-BC77-FC3FA188346D}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B28742E9-9C6B-4AA5-90CE-19C1BD8A7C45}" = rport=137 | protocol=17 | dir=out | app=system |
"{B7401B8C-DE03-4DDE-BB57-FE799361B549}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{B8E3F264-17D2-4FB5-8D5B-AA909FD6BFD6}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B8F373D4-A4CB-4005-A6FA-588D4AD9F6AE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{BAE226E1-0DED-47A8-B542-CEAD32A045E6}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{BB844068-FBF4-42B6-B796-8289F31120CA}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{BCE7AD89-0CCA-4FC3-98D9-E344F775817C}" = lport=37675 | protocol=17 | dir=in | name=oovoo udp port 37675 |
"{BF97780C-74EC-4AC3-B0C6-600FA0D518A6}" = lport=2869 | protocol=6 | dir=in | name=upnp tcp |
"{C41A43AE-4ACE-4162-8C13-8C33534C004B}" = lport=2869 | protocol=6 | dir=in | name=upnp tcp |
"{C877D260-87D7-4208-B93B-DB517AF91D8B}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CC5F7DB4-3178-4821-9137-A0E2A96365E8}" = lport=3784 | protocol=6 | dir=in | name=vent |
"{CD83FEC8-BB10-4EAD-A8E5-A669030C1C75}" = lport=5720 | protocol=17 | dir=in | name=jumi controller |
"{CE4CF77C-C7ED-47F7-99C6-272170910899}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CF38B9C0-C0E0-4D26-8169-2832C84453FC}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{D77965E1-2BBB-4F25-8C3C-B886D4976B3E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DB5E64F0-1F1E-4F38-8E76-C074DB296E3B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{E111CEC1-1216-415B-BAA7-C8D6C6AD4424}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{E8BF7ED3-CB4D-4051-8348-27328E5FB908}" = lport=5720 | protocol=6 | dir=in | name=jumi controller |
"{EC9B5CC2-BD1C-4AA0-9821-4AF2AB9F787A}" = lport=1900 | protocol=17 | dir=in | name=upnp udp |
"{F6D39B48-7B56-45BF-99A4-FB12664D76A2}" = lport=3390 | protocol=6 | dir=in | app=system |
"{F8B14DE0-CE43-4A49-94A3-B89D41DF443E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{F9A0F74A-4416-4AC0-9DEA-A195CAC5402E}" = rport=10243 | protocol=6 | dir=out | app=system |
"{FA25C815-5087-440A-AF70-FAF2B361C5EB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{FB0269C7-7DA7-4EBA-A71F-38085FF3ED05}" = lport=80 | protocol=6 | dir=in | name=apache |
"{FB2F4B7E-4F6B-46A0-BD7D-AA0BBA2AE625}" = lport=86 | protocol=17 | dir=in | name=broadcam |
"{FC558DD6-DFF8-4E08-9354-EB73164C8E76}" = lport=403 | protocol=6 | dir=in | name=apache |
"{FE4DBAD1-44EB-426B-A3F7-1223CA51A3DD}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03966699-F97F-486B-841E-1DD452B5C975}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe |
"{0B7AF6DE-0DFA-4007-BDED-E55D0A9D7B1A}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe |
"{0E98B1B3-CC2D-42C2-8B0E-841F3E018F47}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{0F5A9053-05DB-4426-99D3-7105F0D23F1D}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{18979841-1A11-4E51-8967-F6F6E810E987}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe |
"{1AA14C49-BC37-4B8E-BCD7-757B00A3128E}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\blizzard downloader.exe |
"{1C2D4922-585A-49CD-AD83-0ADD4C01CD0C}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{1CC68DAF-CB4E-47CB-9B42-3742E9274BF7}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{20965936-D51C-44BD-9F9E-2E8525B18904}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.patch.exe |
"{25C49994-C154-408F-961F-EBA27A06228B}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{270054B6-9500-417D-9110-31627E221CFC}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{28304798-0168-4BB6-A40C-AEBE57676882}" = protocol=6 | dir=out | app=system |
"{28E55419-31CA-4A43-BF30-ACB0D8667EFD}" = protocol=6 | dir=out | app=%systemroot%\system32\wudfhost.exe |
"{2A7E6880-1864-4CE7-9430-6388F290BCED}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{324EEEB6-3024-4ECC-BDCE-E5CC7C5F10A4}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{332A9FA8-20A9-4E29-BA40-1CAAEB09D6C0}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe |
"{337DEE56-0A89-45C9-817E-5FBA07D104D0}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{33F5F1DD-0F7F-46B9-8F37-4069C4EF7751}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{386A1C54-AF3F-413C-AFC0-7C0BBABDE285}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{3ACC809D-A1ED-4D20-89E3-E19AEE7D2C33}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3BABF2F5-B2C3-4AF5-B54C-68804370E7DA}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.patch.exe |
"{3DDBE095-3E75-4B33-95C4-105942DD82E7}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{3E7A1AE2-26C4-4877-8E30-327B5B286E3C}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{431CB868-3ADA-4F62-BBB5-0167BCE392B2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{4910436F-1CEF-4F90-AFB9-14245F9AE0E9}" = protocol=6 | dir=out | app=system |
"{4B74A6B7-509A-40B1-82C9-F94CDA266876}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{4E5A8F29-32D3-4CBE-99E4-A26F5153E985}" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"{50909B25-9E43-425B-AF52-5B753F582954}" = protocol=17 | dir=in | app=c:\program files\cain\cain.exe |
"{5779A2C0-B45F-4C86-8BB1-D741EDB43E14}" = protocol=6 | dir=out | app=system |
"{5AC1837A-FF40-4265-9C70-618D71ADC55E}" = protocol=17 | dir=in | app=c:\xampp\sendmail\sendmail.exe |
"{64926F8C-2C06-4CE9-9A3C-C1B3509A2F4B}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe |
"{64EA6223-1F9F-47D2-8AF6-202BB7A489DF}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{65B667D6-12CB-4EEE-BAB8-648A5DB6781A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6694C511-4B3F-403A-AF75-A7C0C3A12534}" = protocol=6 | dir=out | app=system |
"{68973C96-F769-4F56-9910-B30505BAC3AF}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"{6B6AA57D-C9EF-4FE8-BA85-0C382059C737}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{6D8E34CB-AF53-4D82-803A-E95C5614B457}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe |
"{730ACE95-6CB9-467D-9EFB-C6A419F21130}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{758743D0-B51D-4F7D-89CF-B5A7178DF11F}" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"{765E32A7-B893-4D3F-9CEA-3DD9450FE8B7}" = protocol=6 | dir=in | app=c:\program files\cain\cain.exe |
"{79831363-537D-4EFE-BBAB-BC76CB0F99D3}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\blizzard downloader.exe |
"{898073CB-08B9-4674-BD17-38C3EAB56EC5}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{8C113BDC-F63F-4CC1-B3C8-AE01A6C062F0}" = protocol=6 | dir=in | app=c:\xampp\sendmail\sendmail.exe |
"{8D8C9E76-5A92-4F4D-BBCC-607A181F06B3}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{90640B7E-195B-4391-BDDB-9A5E18ED7A82}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{9271785C-F0F1-4A9B-8164-B0B3F67EEE0B}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{93272C3F-BFC4-48F3-83C1-ACC83CA597B3}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{93C3ED02-8A54-4AC6-A999-DBEF96E2A526}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"{94EC080E-ECF2-4254-82CD-F8D10FB3BDF3}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{9569317E-45B8-4952-AC1D-0DEDF20718E5}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{958767EA-36DF-4B58-9D33-C085452275A5}" = protocol=6 | dir=in | app=c:\program files\tightvnc\tvnserver.exe |
"{970A3104-82DE-4881-A663-4E03B9C9C109}" = protocol=6 | dir=out | app=%programfiles%\zune\zunenss.exe |
"{9B76C538-A9A2-47C3-A74A-2739CD36A050}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe |
"{9F9F7C50-CF19-446A-BF1F-80EA67E2C956}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe |
"{A00C2EA8-FFBA-4F0B-8E41-FAF5F3913309}" = protocol=17 | dir=in | app=c:\program files\tightvnc\vncviewer.exe |
"{A188DF18-2AFA-4231-9CA6-8EBC16788F52}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{A46651C6-DFE7-4DEA-9839-9448228F8640}" = protocol=6 | dir=in | app=%programfiles%\zune\zunenss.exe |
"{ABFB26CC-CFAB-4A21-89CF-B76BC8955AD2}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{AE554A04-0B9E-40A2-BC59-8D8E4ED4EC16}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |
"{AE7259F2-AE95-451F-9B03-E3B41863DC22}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe |
"{AF0794B5-4DB4-4B7A-A5A2-E274CD637340}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AFE67F1D-9D2D-453F-9526-7A211EA53CA7}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{B2996BBD-A0BA-4DD8-8A41-D7E1E70A694F}" = protocol=17 | dir=in | app=%programfiles%\zune\zunenss.exe |
"{B3186588-F05F-4702-B2FD-D27714DB7FA4}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{B3FDEBB4-3F34-4172-958F-DEB836680EE5}" = protocol=17 | dir=out | app=%programfiles%\zune\zunenss.exe |
"{B6591036-24AE-4737-8B75-D526ABBA6A65}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{B733D597-D183-4045-BAB8-BB84213CE740}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{B7F00809-BEC7-49FC-893F-9B5DE4623AB9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{B7F6EE6B-69DB-4921-9B13-D1359F158D33}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{BA276193-9B73-4120-B37D-F630C82BA49D}" = protocol=17 | dir=in | app=c:\program files\tightvnc\tvnserver.exe |
"{BA7BE5C3-0537-436D-BCF9-5974C9BADFCD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BF0B86D9-D529-424A-A2F0-35CA62D0B341}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{C1A778DF-ECBC-4B74-A52A-4E9C9CB4A140}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C45DE249-9205-452F-AF1E-6C258492B7BE}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CC4167A4-BF84-4FD0-9365-5B646E9BD47D}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{D1905ED9-AD9C-4C7B-A94F-438B464E2BF4}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe |
"{D57563DB-361C-4B70-B42D-F786F9D151AA}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{D79A14D6-9F99-4469-86DE-13200E129E02}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{DAD73B2A-2263-4FED-A053-776F79F5AF85}" = protocol=6 | dir=out | app=%programfiles%\zune\zunenss.exe |
"{DD1C7C31-441A-4346-A497-721BFAB0B128}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{DD1E6B03-9BD8-4906-AB6D-A8EBC04B0907}" = protocol=6 | dir=out | app=system |
"{E6997AFA-3B85-438A-A09E-E019FF38D520}" = protocol=6 | dir=in | app=c:\program files\tightvnc\vncviewer.exe |
"{E8D0561C-66FE-4E57-BC2A-18B4053C5FE4}" = dir=in | app=c:\program files\skype\plugin manager\skypepm.exe |
"{E9A1A8EE-7A18-4817-8E38-F220F2206946}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{EBF18F91-0391-4D4E-98CB-0ED9DA0DCD7E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{EC1EEBC3-025D-4F82-A50F-E6B542052496}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe |
"{ED2B0DC0-ADBD-4005-A39E-6BE50D2C5675}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{F085ED89-0813-4AE0-8495-E2B9E2C67DB0}" = protocol=6 | dir=in | app=%programfiles%\zune\zunenss.exe |
"{F15B75DA-4412-4132-B5DD-A12A235E4BA8}" = protocol=17 | dir=in | app=%programfiles%\zune\zunenss.exe |
"{F4165090-1291-4222-9106-6B8D09A7A941}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe |
"{F4683BAC-5EE8-4FFD-8B90-39F1C4358138}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{F9FC456A-28DC-41AB-AA7B-26EF0D885890}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{FA9047DC-2517-4CF6-AD4B-FBD852CED5A4}" = protocol=17 | dir=out | app=%programfiles%\zune\zunenss.exe |
"TCP Query User{02745104-1E75-472C-8578-7653C4461CB7}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{084BA688-D68C-4D10-8259-12168D13B81D}C:\program files\world of warcraft\wow-3.3.5.12213-to-3.3.5.12340-enus-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.5.12213-to-3.3.5.12340-enus-downloader.exe |
"TCP Query User{093C3E58-149D-417F-9418-0BA87BA76AFF}C:\program files\jumi\jumi.exe" = protocol=6 | dir=in | app=c:\program files\jumi\jumi.exe |
"TCP Query User{1389B4F4-389F-4904-84FF-A96E59524376}C:\xampp\filezillaftp\filezilla server.exe" = protocol=6 | dir=in | app=c:\xampp\filezillaftp\filezilla server.exe |
"TCP Query User{1D8EBDF1-373C-4607-98ED-92A2E4AA9341}C:\xampp\mercurymail\mercury.exe" = protocol=6 | dir=in | app=c:\xampp\mercurymail\mercury.exe |
"TCP Query User{34010220-8019-44F7-B9AC-29266C7A7AB6}C:\program files\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-enus-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-enus-downloader.exe |
"TCP Query User{419FAA7E-918D-4FC6-AA73-A454984DBE04}C:\program files\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-enus-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-enus-downloader.exe |
"TCP Query User{42E7C54F-5D49-4BFE-8431-FEB1110B42E4}C:\program files\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-enus-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-enus-downloader.exe |
"TCP Query User{44F7782D-8C2E-4391-9AC8-C1651D0569C8}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{4D5A5D44-A0CF-4A1B-9A94-DAA7301CB0AC}C:\program files\nch software\broadcam\broadcam.exe" = protocol=6 | dir=in | app=c:\program files\nch software\broadcam\broadcam.exe |
"TCP Query User{5B72E50A-C0FA-41B9-A3A0-289F260F32F9}C:\program files\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"TCP Query User{60CD4F27-A2D8-46CB-9D9A-CAEC5708DB89}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{66E288A4-A186-4C0E-BF52-7E0BF1E4147F}C:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe |
"TCP Query User{6ECC9597-8E17-4EE9-8AAD-C0D177B14EF3}C:\program files\world of warcraft\wow-2.1.1.1897-enus-tools-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-2.1.1.1897-enus-tools-downloader.exe |
"TCP Query User{6EDED0E5-54CC-4BB8-B24E-4CDBC8762C40}C:\program files\oovoo\oovoo.exe" = protocol=6 | dir=in | app=c:\program files\oovoo\oovoo.exe |
"TCP Query User{6FF6BB1A-EDC5-48C3-BACA-88B7EDB506D8}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{999E0A9D-AC3F-48FF-898E-F08F1AC8891B}C:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe |
"TCP Query User{9BEAB8AA-275E-44A8-9B18-3EE4BDC6B017}C:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"TCP Query User{AFD7FBF6-386A-41B7-AE84-EE0B3A5662D1}C:\program files\world of warcraft\wow-3.3.5.12340-x86-win-enus-bkgnd-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.5.12340-x86-win-enus-bkgnd-downloader.exe |
"TCP Query User{B2867879-3649-4597-AA77-42AA08CFB6A8}C:\program files\frostwire\frostwire.exe" = protocol=6 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"TCP Query User{B51088B8-F0BA-4587-9337-E7A7DE355CBE}C:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"TCP Query User{DAE1A617-661C-42F0-B61A-092379C1ACEA}C:\program files\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-enus-downloader.exe" = protocol=6 | dir=in | app=c:\program files\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-enus-downloader.exe |
"TCP Query User{F3C5551B-6FE1-4365-8C24-0CDBB44CAC88}C:\program files\aim\aim.exe" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"UDP Query User{03F42D48-A664-4405-BAD1-E8ADD0EF49C6}C:\program files\nch software\broadcam\broadcam.exe" = protocol=17 | dir=in | app=c:\program files\nch software\broadcam\broadcam.exe |
"UDP Query User{05C2152A-33D4-4936-A0D1-7BF94264759A}C:\program files\world of warcraft\wow-3.3.5.12340-x86-win-enus-bkgnd-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.5.12340-x86-win-enus-bkgnd-downloader.exe |
"UDP Query User{078F73F2-1F62-4292-A79B-D3ED3861EA9B}C:\program files\world of warcraft\wow-2.1.1.1897-enus-tools-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-2.1.1.1897-enus-tools-downloader.exe |
"UDP Query User{1803C9B7-5B62-415E-A38E-2600ACD06958}C:\xampp\mercurymail\mercury.exe" = protocol=17 | dir=in | app=c:\xampp\mercurymail\mercury.exe |
"UDP Query User{1F92D914-1D69-43F7-BE50-23C26DEC9516}C:\program files\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-enus-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.0.11159-to-3.3.2.11403-enus-downloader.exe |
"UDP Query User{24E7257B-082D-4FB5-85BC-B263BD46FEA7}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{3102EE8B-08D2-498A-A831-72EA768AC2AD}C:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"UDP Query User{37E7D95B-03BF-4374-B6D5-1193EA267429}C:\program files\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-enus-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-enus-downloader.exe |
"UDP Query User{3B779639-7264-4EDE-A214-84E7D6265C77}C:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"UDP Query User{41DAB0D3-6A3A-48AD-B649-552344608E1B}C:\program files\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-enus-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-enus-downloader.exe |
"UDP Query User{45DC20A2-22B7-4052-BCAE-529E23CC8F8D}C:\xampp\filezillaftp\filezilla server.exe" = protocol=17 | dir=in | app=c:\xampp\filezillaftp\filezilla server.exe |
"UDP Query User{4BCB4243-1F61-4356-A196-3E2C946EDEB1}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{4CF8FF2C-2837-43E5-BD67-3B0F5DF23A7F}C:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe |
"UDP Query User{9537B8C5-032C-4185-8BBA-82996BB2AFBA}C:\program files\frostwire\frostwire.exe" = protocol=17 | dir=in | app=c:\program files\frostwire\frostwire.exe |
"UDP Query User{9B961873-9B60-4102-8A73-DBFAA81FDEAB}C:\program files\world of warcraft\wow-3.3.5.12213-to-3.3.5.12340-enus-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.5.12213-to-3.3.5.12340-enus-downloader.exe |
"UDP Query User{A03B153A-1BFA-4C4C-9FE8-708479A75FBF}C:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files\macromedia\dreamweaver mx 2004\dreamweaver.exe |
"UDP Query User{A2802AEA-B62B-4A16-AECA-D4EEBF2ED888}C:\program files\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-enus-downloader.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-enus-downloader.exe |
"UDP Query User{A6198ADF-1538-4D0D-B105-A7696984712D}C:\program files\aim\aim.exe" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"UDP Query User{D166E7ED-AFCC-469D-91E4-F41C08445DB6}C:\program files\oovoo\oovoo.exe" = protocol=17 | dir=in | app=c:\program files\oovoo\oovoo.exe |
"UDP Query User{D44DC318-5619-4B3F-9F06-6417B85352FF}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{E7203029-4CEC-4C1B-8A38-43804DE4971B}C:\program files\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"UDP Query User{F11F5A27-FBB1-45F9-8F54-842D66EDAA8D}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{FAF79994-3DC0-4DAE-BF27-90A07F3F3BAD}C:\program files\jumi\jumi.exe" = protocol=17 | dir=in | app=c:\program files\jumi\jumi.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"_{F072CA07-A781-45E4-9975-C033A73019CF}" = Corel VideoStudio Pro X3
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}" = Macromedia Dreamweaver MX 2004
"{0659E943-DDF4-44FC-9FEE-A13B09F8BB08}" = Adobe Flash Media Live Encoder 3.2
"{07EEE598-5F21-4B57-B40B-46592625B3D9}" = Zune Language Pack (PTB)
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1AE3E621-E0C0-4aa1-B10B-B3E353A8D110}" = c3100_Help
"{1D9C9979-7B3D-0EBA-06B5-1A648DE8ECFC}" = Skins
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20ACB2F8-3BCA-45A8-80A2-9D3CB5C25F43}" = Safari
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 22
"{282E5AB2-8E47-4571-B6FA-6B512555B557}" = HP Photosmart.All-In-One Driver Software 8.0 .A
"{294BF709-D758-4363-8D75-01479AD20927}" = Windows Live Family Safety
"{2A2F3AE8-246A-4252-BB26-1BEB45627074}" = Microsoft SQL Server System CLR Types
"{2C4E2E4E-A7C9-4CCB-BF03-FE6EBD5D4AB7}" = Windows Mobile Device Updater Component
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{36FDBE6E-6684-462B-AE98-9A39A1B200CC}" = HP Product Assistant
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{44F5A980-8A6B-4aca-8D85-EFCE5D67D379}" = AIO_CDA_ProductContext
"{4685A344-6718-4923-AA9D-158A0A2E1CFB}" = SmartSound Quicktracks for Premiere Elements 8.0
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{48FE73F3-4C3A-4871-BCD0-A7726A08BD64}" = Hex Workshop v6
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform
"{4D530901-0614-4537-B4CE-EA1000038301}" = Game Room
"{4E5386F5-C0F6-4532-A54A-374865AEAB71}" = Cisco PEAP Module
"{4E968D9C-21A7-4915-B698-F7AEB913541D}" = Microsoft SQL Server 2008 R2 Management Objects
"{50F68032-B5B7-4513-9116-C978DBD8F27A}" = Corel DVD MovieFactory
"{53C6D09E-EAB6-49E5-BA4C-BA7FF13830FB}" = Sound Blaster Audigy ADVANCED MB
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57E08EAC-F4FA-E453-6516-CA4D8AF4BD6D}" = CCC Help English
"{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}" = Microsoft Visual C# 2010 Express - ENU
"{5BF5F9C5-E95B-4AFA-94BE-F2A9CA73B61D}" = Apple Mobile Device Support
"{5C93E291-A1CC-4E51-85C6-E194209FCDB4}" = Zune Language Pack (PTG)
"{5D9748ED-2EC3-E694-68E7-14AE077AA686}" = Catalyst Control Center Core Implementation
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam
"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant
"{648AB29F-AA16-4FFE-8DA7-18B4F417AC8C}" = Blackmagic Intensity
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{6740BCB0-5863-47F4-80F4-44F394DE4FE2}" = Zune Language Pack (NLD)
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack
"{6B33492E-FBBC-4EC3-8738-09E16E395A10}" = Zune Language Pack (ESP)
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6FC963A4-D7C2-743E-4634-0BE6893D2D30}" = ccc-utility
"{7006ED29-58F2-40C3-AE87-039287AD20B6}" = Zune
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76F9CF97-FC4B-4E20-B363-D127C888448F}" = Cisco LEAP Module
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{787D1A33-A97B-4245-87C0-7174609A540C}" = HP Update
"{79D4609A-AE25-B8CA-9FD2-9DC5A919414E}" = ccc-core-static
"{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax
"{7AC72E27-1BA9-D541-996D-AF926F21DB92}" = ATI Catalyst Install Manager
"{7B08D306-7266-4647-A926-2F78817ED1E0}" = Microsoft Corporation
"{7E4CB404-F1E4-4E81-A1CB-2CBB310481D1}" = MLE
"{7E7D7935-B0C8-4032-80BA-2CDC9E43C3B8}" = Microsoft Visual C# 2005 Express Edition - ENU
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{878E19E1-DBB3-4F17-9319-7ECE43D40606}" = MySQL Server 5.5
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8958DFF1-3103-8A70-9108-40D7D359D8C6}" = Catalyst Control Center Graphics Full New
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_ENTERPRISE_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_ENTERPRISE_{2FC4457D-409E-466F-861F-FB0CB796B53E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90850409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{9870C7AE-7C6A-478D-9A75-35827382220F}" = Pinnacle Systems USB-2 Device Drivers
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A57F3E7-F32D-FD92-124C-B9C9D7231C20}" = Catalyst Control Center Graphics Light
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A0E583D1-23F7-4C35-9620-B169D7715E4B}" = Adobe Premiere Elements 8.0
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A5BA14E0-7384-11D4-BAE7-00409631A2C8}" = Macromedia Extension Manager
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9A624F1-ED8D-44F9-A4EE-ADD2235C51A7}" = BlackBerry Connect Desktop for Windows Mobile
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA6C27A2-7427-43f5-9ECC-0F3B9BC2A5B5}_is1" = Sothink Video Encoder Engine
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAD47011-8518-4608-9656-951DA35B587B}" = iTunes
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AB61E316-F10B-43eb-B47F-42095835F9CC}" = C3100
"{AC76BA86-7AD7-1033-7B44-A94000000001}" = Adobe Reader 9.4.2
"{AF19F291-F22F-4798-9662-525305AE9E48}" = WordPerfect Office 12
"{AF1C9345-B53D-4110-BFBF-A0DD83AEAB83}" = AIO_CDA_Software
"{AF72E557-0647-4DE5-ACDA-ECFB38D5D732}" = Licensing Service Install
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B10914FD-8812-47A4-85A1-50FCDE7F1F33}" = Windows Live Sync
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"{BB22EB20-70C4-32D9-CAE5-816E24F458CA}" = Catalyst Control Center Graphics Full Existing
"{BE236D9A-52EC-4A17-82DA-84B5EAD31E3E}" = Zune Language Pack (DEU)
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{BF53252E-4AB2-4C7F-A0FD-6100755745E3}" = Cisco EAP-FAST Module
"{C5D37FFA-7483-410B-982B-91E93FD3B7DA}" = Zune Language Pack (ITA)
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C68D33B1-0204-4EBE-BC45-A6E432B1D13A}" = Zune Language Pack (FRA)
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{CAAB0192-5704-469F-A0BE-2D842D70E93B}_is1" = Sothink FLV Player
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB6075D9-F912-40AE-BEA6-E590DA24F16B}" = Adobe Photoshop Elements 7.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack
"{D0DDF9EE-C67F-368B-EB42-ECB44FD7556D}" = Adobe Photoshop.com Inspiration Browser
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9 Series
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E79066AE-9AF1-9C3C-6F3A-95BC4A3C3E33}" = Catalyst Control Center Graphics Previews Common
"{E94D1753-6C84-4726-83C1-2FE57B4F896B}_is1" = E.M. Total Video Converter Command Line 2.50
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F069C491-69E6-4D9B-9A0C-B7894A1FA97C}" = Setup
"{F072CA07-A781-45E4-9975-C033A73019CF}" = ICA
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F18E39EE-5306-6765-9EE3-CD3ECFE9678F}" = Catalyst Control Center Graphics Previews Vista
"{F206FEC3-F5DD-43FD-A8CF-9C46B8A6A92C}" = VSPro
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F4E9851F-765E-40B7-9859-237C2724E62C}" = DeviceIO
"{F53D678E-238F-4A71-9742-08BB6774E9DC}" = Windows Live Family Safety
"{F6A76E9C-C299-4CFA-AD2A-57FE9DD68B70}" = Contents
"{F8423392-2296-4748-9B66-344432459632}" = PureHD
"{F86B6D9F-FA9A-4164-A66A-EAFF7C067272}_is1" = Sothink Video Encoder for Adobe Flash
"{F909BD3C-8684-4ACF-B7C3-33F4F9F901B7}" = Share
"{F95C8C1F-25BB-44EC-A7E6-5C17ABC6BC71}" = VIO
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FB0B6DDD-DF3E-4CD6-927C-724AB854E322}" = VSClassic
"{FD67D9F3-FED6-4A2E-9D6C-8C8C44DEF8FF}" = IPM_VS_Pro
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"abgx360" = abgx360 v1.0.5
"Acoustica Effects Pack" = Acoustica Effects Pack
"Acoustica Mixcraft 5" = Acoustica Mixcraft 5
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Photoshop Elements 7" = Adobe Photoshop Elements 7.0
"AIM_7" = AIM 7
"Audacity_is1" = Audacity 1.2.6
"AutoHideIP" = Auto Hide IP
"BroadCam" = BroadCam Video Streaming Server
"Broadcom 802.11b Network Adapter" = Dell Wireless WLAN Card
"Debut" = Debut Video Capture Software
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ffdshow_is1" = ffdshow [rev 1723] [2007-12-24]
"FrostWire" = FrostWire 4.20.6
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0
"ImgBurn" = ImgBurn
"InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}" = SmartSound Quicktracks 5
"InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}" = SmartSound Quicktracks for Premiere Elements 8.0
"InstallShield_{50F68032-B5B7-4513-9116-C978DBD8F27A}" = Corel DVD MovieFactory 7 SE
"InstallShield_{B8A2869E-30CA-40C5-9CF8-BD7354E57EF8}" = SmartSound Common Data
"Magic ISO Maker v5.4 (build 0251)" = Magic ISO Maker v5.4 (build 0251)
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Visual C# 2005 Express Edition - ENU" = Microsoft Visual C# 2005 Express Edition - ENU
"Microsoft Visual C# 2010 Express - ENU" = Microsoft Visual C# 2010 Express - ENU
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"OJOsoft Total Video Converter_is1" = OJOsoft Total Video Converter
"PhotoshopdotcomInspirationBrowser.4C35C4D325D350FE0114230CBADCA2DDD0AC8D25.1" = Adobe Photoshop.com Inspiration Browser
"PremElem80" = Adobe Premiere Elements 8.0
"PremiumSoft Navicat Lite_is1" = PremiumSoft Navicat Lite 9.1
"PROSet" = Intel® PRO Network Connections Drivers
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Tansee iPhone Transfer SMS_is1" = Tansee iPhone Transfer SMS
"ToolBox" = NCH Toolbox
"Total Video Converter 3.61_is1" = Total Video Converter 3.60 100204
"Tunatic" = Tunatic
"uTorrent" = µTorrent
"VideoPad" = VideoPad Video Editor
"VLC media player" = VLC media player 1.1.5
"Windows 7 - Codec Pack" = Windows 7 Codec Pack 2.6.1
"Windows Media Encoder 9" = Windows Media Encoder 9 Series
"WinLiveSuite" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1.2
"WinRAR archiver" = WinRAR archiver
"World of Warcraft" = World of Warcraft
"Zune" = Zune

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"InstallShield_{A9A624F1-ED8D-44F9-A4EE-ADD2235C51A7}" = BlackBerry Connect Desktop for Windows Mobile

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 5/14/2011 11:49:25 AM | Computer Name = Eric-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5/14/2011 11:52:43 AM | Computer Name = Eric-PC | Source = Bonjour Service | ID = 100
Description = 488: ERROR: read_msg errno 10054 (An existing connection was forcibly
closed by the remote host.)

Error - 5/14/2011 11:55:48 AM | Computer Name = Eric-PC | Source = Bonjour Service | ID = 100
Description = 468: ERROR: read_msg errno 10054 (An existing connection was forcibly
closed by the remote host.)

Error - 5/14/2011 11:58:55 AM | Computer Name = Eric-PC | Source = Bonjour Service | ID = 100
Description = 488: ERROR: read_msg errno 10054 (An existing connection was forcibly
closed by the remote host.)

Error - 5/14/2011 12:05:26 PM | Computer Name = Eric-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5/14/2011 12:06:36 PM | Computer Name = Eric-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5/14/2011 12:13:05 PM | Computer Name = Eric-PC | Source = Microsoft Security Client Setup | ID = 100
Description = HRESULT:0x8004FF03 Description:Cannot complete the Microsoft Security
Essentials Setup Wizard. An error has prevented the Security Essentials setup wizard
from completing successfully. Please restart your computer and try again. Error
code:0x8004FF03.

Error - 5/14/2011 12:16:26 PM | Computer Name = Eric-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5/14/2011 12:17:06 PM | Computer Name = Eric-PC | Source = Windows Search Service | ID = 3013
Description =

Error - 5/14/2011 1:09:27 PM | Computer Name = Eric-PC | Source = Bonjour Service | ID = 100
Description = 400: ERROR: read_msg errno 10054 (An existing connection was forcibly
closed by the remote host.)

[ Broadcom Wireless LAN Events ]
Error - 2/4/2010 12:29:49 AM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 23:29:49, Wed, Feb 03, 10 Error - Unable to gain access to user store


Error - 5/21/2010 1:46:35 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 13:46:35, Fri, May 21, 10 Error - Unable to gain access to user store


Error - 5/21/2010 1:53:30 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 13:53:29, Fri, May 21, 10 Error - Unable to gain access to user store


Error - 5/21/2010 3:11:23 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 15:11:23, Fri, May 21, 10 Error - Unable to gain access to user store


Error - 5/21/2010 4:14:30 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 16:14:30, Fri, May 21, 10 Error - Unable to gain access to user store


Error - 6/22/2010 8:22:48 AM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 08:22:48, Tue, Jun 22, 10 Error - Unable to gain access to user store


Error - 10/16/2010 10:58:19 AM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 10:58:18, Sat, Oct 16, 10 Error - Unable to gain access to user store


Error - 12/13/2010 6:16:45 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 17:16:45, Mon, Dec 13, 10 Error - Unable to gain access to user store


Error - 1/31/2011 4:35:29 PM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 15:35:29, Mon, Jan 31, 11 Error - Unable to gain access to user store


Error - 3/17/2011 3:23:27 AM | Computer Name = Eric-PC | Source = WLAN-Tray | ID = 0
Description = 03:23:27, Thu, Mar 17, 11 Error - Unable to gain access to user store


[ Media Center Events ]
Error - 11/12/2010 7:18:08 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 107
Description =

Error - 11/12/2010 7:18:12 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 109
Description =

Error - 11/12/2010 7:19:33 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 107
Description =

Error - 11/12/2010 7:19:34 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 109
Description =

Error - 11/13/2010 6:52:57 AM | Computer Name = Eric-PC | Source = McrMgr | ID = 109
Description =

Error - 11/13/2010 10:53:40 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 107
Description =

Error - 11/13/2010 10:53:41 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 109
Description =

Error - 2/12/2011 2:37:13 PM | Computer Name = Eric-PC | Source = McrMgr | ID = 109
Description =

[ System Events ]
Error - 5/14/2011 12:50:43 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 5/14/2011 12:50:45 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 5/14/2011 12:53:58 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 5/14/2011 12:56:48 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7030
Description =

Error - 5/14/2011 1:03:25 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7034
Description =

Error - 5/14/2011 1:04:30 PM | Computer Name = Eric-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description =

Error - 5/14/2011 1:04:36 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7024
Description =

Error - 5/14/2011 1:07:16 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 5/14/2011 1:07:16 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7000
Description =

Error - 5/14/2011 1:07:16 PM | Computer Name = Eric-PC | Source = Service Control Manager | ID = 7000
Description =


< End of report >

[Blade81]

Hi,

If you still need help with this do following, please.


Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds file to run the tool.

• When done, DDS will open two (2) logs:
  • DDS.txt
    
  • Attach.txt
  
  
• Save both reports to your desktop. Post them back to your topic.