I have a problem in my browsers, that some random words become green colored links,
after i hover it with the mouse, it's show some ads.( )
here is the otl log:
OTL logfile created on: 02/12/2012 18:41:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Rotem\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040d | Country: Israel | Language: HEB | Date Format: dd/MM/yyyy
2.00 Gb Total Physical Memory | 0.89 Gb Available Physical Memory | 44.30% Memory free
4.00 Gb Paging File | 1.55 Gb Available in Paging File | 38.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97.56 Gb Total Space | 8.32 Gb Free Space | 8.53% Space Free | Partition Type: NTFS
Drive D: | 200.43 Gb Total Space | 26.39 Gb Free Space | 13.17% Space Free | Partition Type: NTFS
Drive E: | 93.15 Gb Total Space | 7.79 Gb Free Space | 8.36% Space Free | Partition Type: NTFS
Drive F: | 93.15 Gb Total Space | 0.51 Gb Free Space | 0.54% Space Free | Partition Type: NTFS
Drive H: | 6.10 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Computer Name: ROTEM-PC | User Name: Rotem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012/12/02 18:41:38 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Rotem\Downloads\OTL.exe
PRC - [2012/11/28 16:37:22 | 000,059,280 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
PRC - [2012/11/28 16:23:06 | 000,059,280 | ---- | M] (Apple Inc.) -- C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
PRC - [2012/11/19 21:48:14 | 001,435,568 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2012/11/08 01:37:37 | 001,990,464 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
PRC - [2012/11/08 01:37:11 | 006,756,048 | ---- | M] (COMODO) -- C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
PRC - [2012/11/01 08:52:30 | 000,877,264 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files\COMODO\livePCsupport Client\unit.exe
PRC - [2012/11/01 08:52:30 | 000,875,728 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files\COMODO\livePCsupport Client\unit_manager.exe
PRC - [2012/11/01 08:52:28 | 000,070,352 | ---- | M] (Comodo Security Solutions Inc.) -- C:\Program Files\Common Files\Comodo\launcher_service.exe
PRC - [2012/10/31 15:46:38 | 001,467,088 | ---- | M] (Comodo Security Solutions, Inc.) -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe
PRC - [2012/10/31 03:10:23 | 009,128,944 | ---- | M] (TeamSpeak Systems GmbH) -- C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
PRC - [2012/10/23 11:47:48 | 002,848,168 | ---- | M] (TeamViewer GmbH) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012/08/30 17:57:35 | 001,820,520 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012/08/30 17:57:34 | 000,864,104 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012/08/30 10:40:00 | 000,382,312 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2012/07/27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012/01/20 20:03:48 | 000,719,672 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
PRC - [2011/02/26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010/11/10 18:38:40 | 000,380,928 | ---- | M] () -- C:\Program Files\Launchy\Launchy.exe
PRC - [2010/08/03 09:05:54 | 000,358,472 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\LGDevAgt.exe
PRC - [2010/08/03 09:03:46 | 003,649,096 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe
PRC - [2010/08/03 08:43:18 | 001,809,992 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe
PRC - [2009/07/20 11:30:50 | 000,813,584 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPoint\SetPoint.exe
PRC - [2009/07/14 03:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009/07/14 03:14:12 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
PRC - [2009/07/10 11:42:32 | 000,055,824 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.exe
PRC - [2009/07/08 11:01:54 | 005,782,528 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
PRC - [2009/06/04 17:56:10 | 004,025,744 | ---- | M] (Babylon Ltd.) -- C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
PRC - [2008/08/04 14:45:16 | 005,779,456 | ---- | M] () -- C:\Program Files\MySQL\bin\mysqld-nt.exe
========== Modules (No Company Name) ==========
MOD - [2012/11/28 05:43:17 | 000,460,904 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppgooglenaclpluginchrome.dll
MOD - [2012/11/28 05:43:15 | 004,008,040 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll
MOD - [2012/11/28 05:42:30 | 000,587,880 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\libglesv2.dll
MOD - [2012/11/28 05:42:29 | 000,124,520 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\libegl.dll
MOD - [2012/11/28 05:42:22 | 000,157,304 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\avutil-51.dll
MOD - [2012/11/28 05:42:21 | 002,168,952 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\avcodec-54.dll
MOD - [2012/11/28 05:42:21 | 000,275,576 | ---- | M] () -- C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\avformat-54.dll
MOD - [2012/10/11 23:29:09 | 000,414,720 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\sqldrivers\qsqlite4.dll
MOD - [2012/10/11 23:29:08 | 000,426,480 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
MOD - [2012/10/11 23:29:08 | 000,236,016 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
MOD - [2012/10/11 23:29:08 | 000,230,384 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
MOD - [2012/10/11 23:29:08 | 000,184,320 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\QtSql4.dll
MOD - [2012/10/11 23:29:08 | 000,159,216 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\appscanner_plugin.dll
MOD - [2012/10/11 23:29:08 | 000,098,800 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\plugins\ts3g15.dll
MOD - [2012/10/09 04:27:16 | 009,814,968 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_4_402_287.dll
MOD - [2012/08/15 13:43:25 | 014,415,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\97d737762adec957a2d7c80fafb4703a\mscorlib.ni.dll
MOD - [2011/06/24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011/06/24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011/04/20 21:52:11 | 007,859,200 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\QtGui4.dll
MOD - [2011/04/20 21:52:11 | 002,210,816 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\QtCore4.dll
MOD - [2011/04/20 21:52:11 | 000,814,080 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\QtNetwork4.dll
MOD - [2011/03/17 00:11:16 | 004,297,568 | ---- | M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2010/11/10 18:39:08 | 000,090,112 | ---- | M] () -- C:\Program Files\Launchy\plugins\controly.dll
MOD - [2010/11/10 18:39:00 | 000,081,920 | ---- | M] () -- C:\Program Files\Launchy\plugins\calcy.dll
MOD - [2010/11/10 18:38:52 | 000,024,064 | ---- | M] () -- C:\Program Files\Launchy\plugins\gcalc.dll
MOD - [2010/11/10 18:38:40 | 000,380,928 | ---- | M] () -- C:\Program Files\Launchy\Launchy.exe
MOD - [2010/11/10 18:38:40 | 000,094,208 | ---- | M] () -- C:\Program Files\Launchy\plugins\runner.dll
MOD - [2010/11/10 18:38:24 | 000,122,880 | ---- | M] () -- C:\Program Files\Launchy\plugins\weby.dll
MOD - [2010/11/10 18:38:08 | 000,057,344 | ---- | M] () -- C:\Program Files\Launchy\plugins\verby.dll
MOD - [2010/03/22 11:59:00 | 000,118,784 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qjpeg4.dll
MOD - [2010/03/22 11:59:00 | 000,025,088 | ---- | M] () -- C:\Program Files\TeamSpeak 3 Client\imageformats\_old_qgif4.dll
MOD - [2009/12/16 23:18:48 | 000,233,472 | ---- | M] () -- C:\Program Files\Launchy\imageformats\qmng4.dll
MOD - [2009/12/16 21:13:02 | 008,314,880 | ---- | M] () -- C:\Program Files\Launchy\QtGui4.dll
MOD - [2009/12/16 20:56:22 | 000,712,704 | ---- | M] () -- C:\Program Files\Launchy\QtNetwork4.dll
MOD - [2009/12/16 20:54:46 | 002,236,416 | ---- | M] () -- C:\Program Files\Launchy\QtCore4.dll
MOD - [2009/07/20 11:27:14 | 000,017,936 | ---- | M] () -- C:\Program Files\Logitech\SetPoint\khalwrapper.dll
MOD - [2009/07/14 03:15:51 | 000,232,448 | ---- | M] () -- \\?\globalroot\systemroot\system32\mswsock.DLL
MOD - [2009/07/14 03:15:51 | 000,232,448 | ---- | M] () -- \\.\globalroot\systemroot\system32\mswsock.dll
MOD - [2009/07/08 11:01:54 | 005,782,528 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
MOD - [2009/01/15 14:55:10 | 000,565,248 | ---- | M] () -- C:\Program Files\ASUS\EPU-4 Engine\pngio.dll
MOD - [2006/01/10 10:50:20 | 000,024,576 | R--- | M] () -- C:\Windows\System32\AsIO.dll
========== Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- C:\Program Files\RelevantKnowledge\rlservice.exe /service -- (RelevantKnowledge)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\1268245806\Rotem1268245806L.exe -- (.1268245806)
SRV - [2012/11/19 21:48:14 | 001,435,568 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012/11/08 01:37:37 | 001,990,464 | ---- | M] (COMODO) [Auto | Running] -- C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe -- (cmdAgent)
SRV - [2012/11/01 08:52:28 | 000,070,352 | ---- | M] (Comodo Security Solutions Inc.) [Auto | Running] -- C:\Program Files\Common Files\Comodo\launcher_service.exe -- (CLPSLauncher)
SRV - [2012/10/31 15:46:38 | 001,467,088 | ---- | M] (Comodo Security Solutions, Inc.) [Auto | Running] -- C:\Program Files\Common Files\Comodo\GeekBuddyRSP.exe -- (GeekBuddyRSP)
SRV - [2012/10/23 11:47:48 | 002,848,168 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2012/10/09 04:27:16 | 000,250,808 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/09/14 11:36:51 | 000,529,744 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2012/08/30 21:13:00 | 001,258,856 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012/08/30 10:40:00 | 000,382,312 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012/07/27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012/07/13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/06/12 10:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2010/12/28 10:00:34 | 001,296,728 | ---- | M] (www.BitComet.com) [On_Demand | Stopped] -- C:\Program Files\BitComet\tools\BitCometService.exe -- (BITCOMET_HELPER_SERVICE)
SRV - [2010/08/10 22:16:06 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2010/03/10 20:44:26 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2009/07/20 11:28:10 | 000,121,360 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/06/17 10:18:42 | 006,582,912 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.1.36\bin\mysqld.exe -- (wampmysqld)
SRV - [2008/12/10 00:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\Apache2.2.11\bin\httpd.exe -- (wampapache)
SRV - [2008/08/04 14:45:16 | 005,779,456 | ---- | M] () [Auto | Running] -- C:\Program Files\MySQL\bin\mysqld-nt.exe -- (MySQL)
SRV - [2008/04/07 08:17:30 | 000,430,592 | ---- | M] (Nokia.) [On_Demand | Stopped] -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2007/05/31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\WPRO_41_1742.sys -- (WPRO_41_1742)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Garena Plus\Room\safedrv.sys -- (GGSAFERDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Rotem\AppData\Local\Temp\DQHD6EE.tmp -- (GarenaPEngine)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\fwleaf.sys -- (Fwleaf)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys -- (esgiguard)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - File not found [Kernel | On_Demand | Unknown] -- -- (a19fjql1)
DRV - [2012/11/08 01:37:54 | 000,494,416 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmdGuard.sys -- (cmdGuard)
DRV - [2012/11/08 01:37:52 | 000,019,632 | ---- | M] (COMODO) [File_System | System | Running] -- C:\Windows\System32\drivers\cmderd.sys -- (cmderd)
DRV - [2012/08/30 21:13:00 | 010,790,760 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012/05/28 06:09:04 | 000,046,432 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d)
DRV - [2012/04/21 13:54:40 | 000,242,240 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2012/04/21 13:45:32 | 000,477,240 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2011/07/01 11:46:40 | 000,026,624 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2011/05/10 08:06:14 | 000,018,432 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netaapl.sys -- (Netaapl)
DRV - [2011/04/23 19:30:16 | 000,028,936 | ---- | M] (WeOnlyDo Software) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wod0205.sys -- (wod0205)
DRV - [2010/09/22 21:19:02 | 000,037,376 | ---- | M] (AnchorFree Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\HssDrv.sys -- (HssDrv)
DRV - [2010/09/22 21:19:02 | 000,032,768 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\taphss.sys -- (taphss)
DRV - [2010/08/11 01:56:46 | 000,055,296 | ---- | M] (Leaf Networks) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\leafnets.sys -- (leafnets)
DRV - [2010/08/01 23:01:04 | 000,026,112 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\remobo32.sys -- (hipeer20)
DRV - [2010/04/16 12:59:44 | 001,521,544 | ---- | M] (Syntek) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkCMini.sys -- (StkCMini)
DRV - [2009/11/23 16:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2009/11/23 16:37:08 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2009/10/05 16:31:50 | 001,221,632 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009/07/14 03:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009/07/14 03:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009/07/14 03:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009/07/14 02:18:07 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WSDPrint.sys -- (WSDPrintDevice)
DRV - [2009/07/14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/14 01:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/14 01:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009/06/17 18:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2009/06/17 18:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009/06/17 18:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009/05/18 10:42:12 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2009/05/13 13:11:34 | 000,006,504 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor)
DRV - [2009/05/05 06:30:28 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2009/03/30 02:09:28 | 000,239,336 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RsFx0103.sys -- (RsFx0103)
DRV - [2009/03/18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2007/12/17 11:14:06 | 000,012,400 | R--- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2007/09/17 14:53:26 | 000,021,632 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2007/07/05 02:57:54 | 000,873,472 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athru6.sys -- (athrusb6)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.babylo...s=1&affID=17393
IE - HKLM\..\URLSearchHook: {67c31ec1-62fb-40e4-aa64-89dc577bae46} - C:\Program Files\Rotem657\prxtbRote.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2405}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2405}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.condui...&ctid=CT2079761
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/405
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://il.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = he
IE - HKCU\..\SearchScopes,DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2405}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylo...00000ffe1f8ff5a
IE - HKCU\..\SearchScopes\{1F096B29-E9DA-4D64-8D63-936BE7762CC5}: "URL" = http://search.babylo...10&affID=100607
IE - HKCU\..\SearchScopes\{3C323A4E-F074-4922-B576-97ACDDAF5E07}: "URL" = http://websearch.ask...A9-374730AB6482
IE - HKCU\..\SearchScopes\{93F16880-2110-4679-ABC9-BCFEDB55C91B}: "URL" = http://search.condui...&ctid=CT3202343
IE - HKCU\..\SearchScopes\{98849269-6638-4E44-B4FA-0BE3428B7865}: "URL" = http://search.yahoo....p={searchTerms}
IE - HKCU\..\SearchScopes\{99DC36C8-8B1A-412C-92DF-344B6BBA08B8}: "URL" = http://index.nana10....Provider=nana10
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2405}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKCU\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-re...q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=;ftp=;https=;
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0
FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:4.5
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..keyword.URL: "http://search.yahoo....type=937811&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&ilc=12&type=937811"
FF - prefs.js..browser.startup.homepage: "http://us.yahoo.com?fr=fp-comodo"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_37: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Rotem\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Rotem\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/03/14 18:02:07 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/09/15 14:29:28 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/10/20 02:46:46 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/03/14 18:02:07 | 000,000,000 | ---D | M]
[2012/11/23 04:00:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Extensions
[2011/11/12 17:04:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\41cvc1fz.default\extensions
[2010/11/07 20:21:54 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\41cvc1fz.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010/12/17 15:51:23 | 000,000,000 | ---D | M] (cacaoweb) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\41cvc1fz.default\extensions\[email protected]
[2012/12/02 13:07:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions
[2012/07/07 15:32:16 | 000,000,000 | ---D | M] (SAMP-IL Comm.. Community Toolbar) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{67c31ec1-62fb-40e4-aa64-89dc577bae46}
[2012/07/04 09:39:18 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
[2012/08/15 17:05:40 | 000,000,000 | ---D | M] (Nana10) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{94996a74-8a98-41bb-85fe-0b6b9787e851}
[2012/02/25 12:40:23 | 000,000,000 | ---D | M] (BitComet Video Downloader) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{B042753D-F57E-4e8e-A01B-7379A6D4CEFB}
[2012/05/13 23:47:04 | 001,487,960 | ---- | M] () (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{0471d3b0-a403-11df-981c-0800200c9a66}.xpi
[2012/07/03 05:04:49 | 000,185,362 | ---- | M] () (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2012/07/04 17:09:40 | 000,743,290 | ---- | M] () (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2012/11/21 23:39:24 | 000,169,792 | ---- | M] () (No name found) -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\6sulschz.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
[2010/06/21 17:33:32 | 000,001,033 | ---- | M] () -- C:\Users\Rotem\AppData\Roaming\Mozilla\Firefox\Profiles\41cvc1fz.default\searchplugins\icqplugin.xml
[2012/12/02 13:16:51 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2012/07/10 09:32:28 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012/09/05 13:41:31 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2012/10/20 14:07:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2011/04/01 22:29:13 | 000,000,000 | ---D | M] (Babylon) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\COFFPLGN
File not found (No name found) -- C:\PROGRAMDATA\NORTON\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_17.0.0.136\IPSFFPLGN
[2012/03/19 15:22:03 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011/11/03 08:59:20 | 000,917,816 | ---- | M] (BitComet) -- C:\Program Files\mozilla firefox\plugins\npBitCometAgent.dll
[2011/08/19 18:24:49 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011/10/01 03:07:18 | 000,001,960 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\morfix-dic.xml
[2012/11/22 22:31:54 | 000,002,515 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\Search_Results.xml
[2012/08/10 16:07:48 | 000,005,142 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wchoppers.xml
[2011/10/01 03:07:18 | 000,001,008 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-he.xml
========== Chrome ==========
CHR - homepage: http://www.google.com
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = http://www.google.co...8&oe=utf-8&aq=t
CHR - default_search_provider: suggest_url = http://suggestquerie...q={searchTerms},
CHR - homepage: http://www.google.com
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Rotem\AppData\Local\Google\Chrome\Application\23.0.1271.95\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: BitCometAgent (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npBitCometAgent.dll
CHR - plugin: RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Java Platform SE 6 U35 (Enabled) = C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 6.0.350.10 (Enabled) = C:\Windows\system32\npdeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - Extension: YouTube = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Facebook = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0\
CHR - Extension: Adblock Plus = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.3.1_0\
CHR - Extension: \u05D7\u05D9\u05E4\u05D5\u05E9 Google = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Mibbit webchat = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbadbkkklnhamjjeagmknajgmbgcmnpi\1.12_0\
CHR - Extension: Cargo Bridge = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\keembkgclppcbilkekfgpobhldjjhpmn\1.5.7_0\
CHR - Extension: Graph.tk = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkhkaamdeplibnmodcgodlkghphdbahk\0.0.1.0_0\
CHR - Extension: Gmail = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: YouTube = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Facebook = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0\
CHR - Extension: Adblock Plus = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.3.1_0\
CHR - Extension: \u05D7\u05D9\u05E4\u05D5\u05E9 Google = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Mibbit webchat = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbadbkkklnhamjjeagmknajgmbgcmnpi\1.12_0\
CHR - Extension: Cargo Bridge = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\keembkgclppcbilkekfgpobhldjjhpmn\1.5.7_0\
CHR - Extension: Graph.tk = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkhkaamdeplibnmodcgodlkghphdbahk\0.0.1.0_0\
CHR - Extension: Gmail = C:\Users\Rotem\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2012/11/14 18:00:54 | 000,000,854 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Savevid Toolbar) - {23cd218f-af09-443f-bbb1-adb89fd5986d} - C:\PROGRA~1\SAVEVI~2\Datamngr\ToolBar\savevidX.dll File not found
O2 - BHO: (BitComet Helper) - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O2 - BHO: (Rotem657 Toolbar) - {67c31ec1-62fb-40e4-aa64-89dc577bae46} - C:\Program Files\Rotem657\prxtbRote.dll (Conduit Ltd.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Babylon IE plugin) - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Savevid Toolbar) - {23cd218f-af09-443f-bbb1-adb89fd5986d} - C:\PROGRA~1\SAVEVI~2\Datamngr\ToolBar\savevidX.dll File not found
O3 - HKLM\..\Toolbar: (Rotem657 Toolbar) - {67c31ec1-62fb-40e4-aa64-89dc577bae46} - C:\Program Files\Rotem657\prxtbRote.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {687578B9-7132-4A7A-80E4-30EE31099E03} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {94996A74-8A98-41BB-85FE-0B6B9787E851} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [Babylon Client] C:\Program Files\Babylon\Babylon-Pro\Babylon.exe (Babylon Ltd.)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] C:\Windows\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG)
O4 - HKLM..\Run: [Regedit32] C:\Windows\system32\regedit.exe File not found
O4 - HKLM..\Run: [Sweetpacks Communicator] C:\Program Files\SweetIM\Communicator\SweetPacksUpdateManager.exe File not found
O4 - HKLM..\Run: [SysEng] wscript.exe "C:\Program Files\Common Files\SystemEngines\out.js" File not found
O4 - HKLM..\Run: [TaskMngr] File not found
O4 - HKLM..\Run: [tvncontrol] "C:\Program Files\Common Files\Comodo\tvnserver.exe" -controlservice -slave File not found
O4 - HKCU..\Run: [{425C741A-791F-AD7F-92FB-A9F8A4728AE5}] C:\Users\Rotem\AppData\Roaming\Ydcenu\ryzo.exe File not found
O4 - HKCU..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
O4 - HKCU..\Run: [BitTorrent] "C:\Program Files\BitTorrent\BitTorrent.exe" /MINIMIZED File not found
O4 - HKCU..\Run: [cacaoweb] "C:\Users\Rotem\AppData\Roaming\cacaoweb\cacaoweb.exe" -noplayer File not found
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKCU..\Run: [Growl] C:\Program Files\Growl for Windows\Growl.exe File not found
O4 - HKCU..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
O4 - HKCU..\Run: [iy4zowdz16] C:\Users\Rotem\iy4zowdz16.exe File not found
O4 - HKCU..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe File not found
O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation)
O4 - HKCU..\Run: [RotterNetApp] C:\Users\Rotem\AppData\Local\Temp\Rar$EX07.615\RotterNet Portable\RotterNet.exe File not found
O4 - HKCU..\Run: [Steam] C:\Program Files\Steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [Windows Update] C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Templates\Server.exe File not found
O4 - Startup: C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk = File not found
O4 - Startup: C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alarm.exe (צבע אדום)
O4 - Startup: C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Rotem\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launchy.lnk = C:\Program Files\Launchy\Launchy.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Translate this web page with Babylon - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O8 - Extra context menu item: Translate with Babylon - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll (BitComet)
O9 - Extra Button: Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O9 - Extra 'Tools' menuitem : Translate this web page with Babylon - {F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478} - C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll (Babylon Ltd.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000034 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000035 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000036 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000037 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000038 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000039 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000040 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000041 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000042 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000043 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000044 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000045 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000046 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000047 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000048 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000049 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000050 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000051 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000052 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000053 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000054 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000055 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000056 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000057 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000058 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000059 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000060 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000061 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000062 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000063 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O10 - Protocol_Catalog9\Catalog_Entries\000000000064 - C:\Program Files\Bonjour\mdnsNSP.dll File not found
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {A4639D2F-774E-11D3-A490-00C04F6843FB} http://download.micr...N-US/msorun.cab (IEAnimBehaviorFactory Class)
O16 - DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_37)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_37)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 213.57.22.5 213.57.2.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{19800176-CB0C-4102-9C0B-5193689EF5FE}: DhcpNameServer = 213.57.22.5 213.57.2.5
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{444B2397-388E-413E-B749-3EDC9C0C272F}: DhcpNameServer = 82.102.139.10 82.102.139.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5D1593A7-3FCE-4D64-B502-09E0C10B94AA}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{61649E94-54A5-4030-B911-C0250BD7DA5C}: DhcpNameServer = 82.102.139.10 82.102.139.20
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{931F2CBD-60E0-43C7-B4E5-B3F421094F26}: NameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EA80F6A8-4A70-4B04-A634-02A7A0F13D97}: NameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\Windows\system32\guard32.dll) - C:\Windows\System32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O20 - Winlogon\Notify\WgaLogon: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22 - SharedTaskScheduler: {1984DD45-52CF-49cd-AB77-18F378FEA264} - FencesShellExt - C:\Program Files\Stardock\Fences\FencesMenu.dll (Stardock)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2008/12/30 12:40:44 | 000,000,044 | R--- | M] () - H:\autorun.inf -- [ UDF ]
O32 - AutoRun File - [2009/02/28 19:57:34 | 007,214,352 | R--- | M] (Ubisoft) - H:\Autorun.exe -- [ UDF ]
O32 - AutoRun File - [2009/03/02 10:25:04 | 000,401,444 | R--- | M] (RAD Game Tools, Inc.) - H:\Autorun.dll -- [ UDF ]
O33 - MountPoints2\{2f783976-8ba8-11e1-a468-90e6ba4a6f31}\Shell - "" = AutoRun
O33 - MountPoints2\{2f783976-8ba8-11e1-a468-90e6ba4a6f31}\Shell\AutoRun\command - "" = H:\Autorun.exe -- [2009/02/28 19:57:34 | 007,214,352 | R--- | M] (Ubisoft)
O33 - MountPoints2\{4b4e4f58-c4c6-11df-9dbe-90e6ba4a6f31}\Shell - "" = AutoRun
O33 - MountPoints2\{4b4e4f58-c4c6-11df-9dbe-90e6ba4a6f31}\Shell\AutoRun\command - "" = K:\PR.exe DIskOnKey.pdf
O33 - MountPoints2\{ed6f05a9-30da-11df-9804-90e6ba4a6f31}\Shell - "" = AutoRun
O33 - MountPoints2\{ed6f05a9-30da-11df-9804-90e6ba4a6f31}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013/05/01 15:44:25 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\Hamachi
[2012/12/02 13:31:37 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\{64D45BE2-E78B-439F-974A-81349E38E19E}
[2012/12/02 13:30:10 | 000,000,000 | ---D | C] -- C:\Program Files\mivzaklive
[2012/12/01 22:00:16 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\{1C831F10-90AC-451B-9AF5-A9B612331486}
[2012/12/01 21:59:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012/12/01 21:59:43 | 000,000,000 | ---D | C] -- C:\Program Files\LogMeIn Hamachi
[2012/12/01 14:39:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/12/01 14:38:35 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/12/01 14:38:34 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/12/01 14:38:34 | 000,000,000 | ---D | C] -- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
[2012/11/22 20:49:54 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\Contact Sms Transfer
[2012/11/22 20:03:25 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\libimobiledevice
[2012/11/22 20:01:12 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\BackupTrans
[2012/11/19 20:42:43 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\phpDesigner
[2012/11/19 07:29:49 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\{880AF891-D652-4DBC-8297-9057F1C4BFFD}
[2012/11/18 21:38:53 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\GarenaPlus
[2012/11/18 21:38:43 | 000,000,000 | ---D | C] -- C:\Program Files\Garena Plus
[2012/11/18 21:38:40 | 000,000,000 | ---D | C] -- C:\ProgramData\GarenaMessenger
[2012/11/18 21:19:29 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\LogMeIn Hamachi
[2012/11/14 18:35:31 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\{4FD81819-1DD7-4F12-AE8B-4EE7C600C567}
[2012/11/14 18:27:50 | 000,000,000 | ---D | C] -- C:\ProgramData\iRinger
[2012/11/14 18:27:29 | 004,815,840 | ---- | C] (Make The Cut, LLC.) -- C:\Users\Rotem\Desktop\iRinger[1].exe
[2012/11/13 23:03:59 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quadriga Games
[2012/11/12 01:07:00 | 000,000,000 | ---D | C] -- C:\ProgramData\InterAction studios
[2012/11/08 16:10:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\phpDesigner 8
[2012/11/08 16:10:03 | 000,000,000 | ---D | C] -- C:\Program Files\phpDesigner 8
[2012/11/06 23:28:32 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Roaming\CorsixTH
[2012/11/05 21:33:24 | 000,000,000 | ---D | C] -- C:\HOSPITAL
[2012/11/05 18:45:37 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\Ubisoft Game Launcher
[2012/11/03 11:57:22 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Comodo
[2012/11/03 11:56:08 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\{D0912B67-F8B5-45DB-9616-6C10261625C0}
[2012/11/03 11:03:06 | 000,000,000 | ---D | C] -- C:\Users\Rotem\AppData\Local\APN
[2012/11/03 11:03:04 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\PC Tools
[2012/11/03 11:02:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Ask
[2012/11/03 11:02:37 | 014,752,504 | ---- | C] (PC Tools ) -- C:\Users\Rotem\Documents\PCToolssetup.exe
[2012/11/03 11:02:34 | 000,356,520 | ---- | C] (Ask.com) -- C:\Users\Rotem\Documents\ApnStub.exe
[6 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[6 C:\*.tmp files -> C:\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/12/02 18:48:18 | 000,055,755 | ---- | M] () -- C:\Users\Rotem\Desktop\green links.png
[2012/12/02 18:48:06 | 001,474,832 | ---- | M] () -- C:\Windows\System32\drivers\sfi.dat
[2012/12/02 18:42:00 | 000,000,938 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2951300007-1305687417-2819150053-1000UA.job
[2012/12/02 18:27:00 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/12/02 18:27:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/12/02 15:27:02 | 000,000,910 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/12/02 13:28:38 | 000,000,378 | ---- | M] () -- C:\Windows\tasks\Registry Reviver-Rotem-Startup.job
[2012/12/02 13:28:17 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/12/02 13:28:06 | 1609,912,320 | -HS- | M] () -- C:\hiberfil.sys
[2012/12/02 13:22:28 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012/12/01 19:42:31 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2951300007-1305687417-2819150053-1000Core.job
[2012/12/01 14:51:42 | 000,028,094 | ---- | M] () -- C:\Users\Rotem\AppData\Roaming\phpdesigner.xml
[2012/12/01 14:39:14 | 000,001,753 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/30 22:44:34 | 000,002,487 | ---- | M] () -- C:\Users\Rotem\Desktop\Google Chrome.lnk
[2012/11/30 01:06:43 | 000,011,580 | ---- | M] () -- C:\Users\Rotem\Documents\marquee.php
[2012/11/29 20:43:55 | 000,512,343 | ---- | M] () -- C:\Users\Rotem\Desktop\TEST.wma
[2012/11/27 20:46:22 | 000,000,600 | ---- | M] () -- C:\Users\Rotem\AppData\Local\PUTTY.RND
[2012/11/23 22:41:06 | 000,730,412 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/11/23 22:41:06 | 000,151,528 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/11/23 03:34:32 | 000,002,324 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012/11/18 22:22:33 | 000,045,270 | ---- | M] () -- C:\Users\Rotem\AppData\Roaming\room_v3.dat
[2012/11/18 21:38:51 | 000,001,025 | ---- | M] () -- C:\Users\Public\Desktop\Garena Plus.lnk
[2012/11/18 15:33:28 | 000,013,424 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/11/18 15:33:28 | 000,013,424 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/11/14 18:27:44 | 004,815,840 | ---- | M] (Make The Cut, LLC.) -- C:\Users\Rotem\Desktop\iRinger[1].exe
[2012/11/14 18:00:54 | 000,000,854 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012/11/13 14:50:31 | 000,000,882 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.umbrella
[2012/11/10 17:55:59 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012/11/08 01:37:56 | 000,082,952 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\inspect.sys
[2012/11/08 01:37:55 | 000,036,072 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdhlp.sys
[2012/11/08 01:37:54 | 000,494,416 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmdGuard.sys
[2012/11/08 01:37:52 | 000,019,632 | ---- | M] (COMODO) -- C:\Windows\System32\drivers\cmderd.sys
[2012/11/08 01:37:35 | 000,034,024 | ---- | M] (COMODO) -- C:\Windows\System32\cmdcsr.dll
[2012/11/08 01:37:34 | 000,301,264 | ---- | M] (COMODO) -- C:\Windows\System32\guard32.dll
[2012/11/03 11:57:24 | 000,002,068 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Start livePCsupport Client.lnk
[2012/11/03 11:02:57 | 014,752,504 | ---- | M] (PC Tools ) -- C:\Users\Rotem\Documents\PCToolssetup.exe
[2012/11/03 11:02:36 | 000,356,520 | ---- | M] (Ask.com) -- C:\Users\Rotem\Documents\ApnStub.exe
[6 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[6 C:\*.tmp files -> C:\*.tmp -> ]
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/12/02 18:48:17 | 000,055,755 | ---- | C] () -- C:\Users\Rotem\Desktop\green links.png
[2012/12/01 14:39:14 | 000,001,753 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/11/30 03:03:48 | 000,011,580 | ---- | C] () -- C:\Users\Rotem\Documents\marquee.php
[2012/11/29 20:43:54 | 000,512,343 | ---- | C] () -- C:\Users\Rotem\Desktop\TEST.wma
[2012/11/23 03:34:32 | 000,002,324 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012/11/19 21:05:28 | 000,028,094 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\phpdesigner.xml
[2012/11/18 21:38:51 | 000,001,025 | ---- | C] () -- C:\Users\Public\Desktop\Garena Plus.lnk
[2012/10/27 11:12:28 | 000,042,440 | ---- | C] () -- C:\Windows\System32\xfcodec.dll
[2012/10/05 18:18:32 | 000,000,581 | ---- | C] () -- C:\Users\Rotem\_viminfo
[2012/10/05 17:54:10 | 000,000,096 | ---- | C] () -- C:\Users\Rotem\.gitconfig
[2012/09/29 20:30:49 | 000,000,098 | ---- | C] () -- C:\Users\Rotem\mercurial.ini
[2012/08/30 10:40:14 | 000,429,416 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012/08/03 22:22:16 | 000,231,954 | ---- | C] () -- C:\Windows\hpwins28.dat
[2012/08/03 22:22:16 | 000,000,418 | ---- | C] () -- C:\Windows\hpwmdl28.dat
[2012/07/30 13:16:18 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2012/07/30 13:16:18 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2012/07/30 13:16:18 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2012/07/30 13:16:18 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2012/06/19 19:10:40 | 000,000,093 | ---- | C] () -- C:\Users\Rotem\AppData\Local\fusioncache.dat
[2012/05/17 19:34:35 | 000,001,190 | ---- | C] () -- C:\Windows\eReg.dat
[2012/03/12 21:03:00 | 000,000,418 | ---- | C] () -- C:\Windows\hpwmdl28.dat.temp
[2011/12/09 11:22:47 | 000,001,321 | ---- | C] () -- C:\Windows\System32\.ini
[2011/11/22 19:03:30 | 000,000,015 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\M.data
[2011/11/22 19:03:02 | 000,000,000 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\data.ll
[2011/11/19 13:25:51 | 000,460,624 | ---- | C] () -- C:\Users\Rotem\AppData\Local\promo.exe
[2011/10/02 22:48:42 | 000,140,072 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011/10/02 22:40:15 | 000,138,056 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\PnkBstrK.sys
[2011/10/02 22:35:39 | 000,280,904 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011/10/02 22:35:33 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011/09/28 17:44:14 | 000,179,271 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2011/09/23 21:52:36 | 000,000,000 | ---- | C] () -- C:\Windows\System32\cd.dat
[2011/09/21 21:53:02 | 000,045,270 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\room_v3.dat
[2011/09/21 21:40:23 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
[2011/09/19 15:21:39 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2011/09/10 13:59:07 | 000,084,616 | ---- | C] () -- C:\Windows\StkUnist.exe
[2011/09/10 13:59:05 | 000,197,648 | ---- | C] () -- C:\Windows\System32\drivers\StkCSF.sys
[2011/06/10 05:34:52 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011/05/08 16:06:14 | 000,036,864 | ---- | C] () -- C:\Users\Rotem\rcon.exe
[2011/04/05 05:58:57 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011/03/09 21:43:47 | 000,239,464 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011/01/29 18:25:32 | 000,000,167 | ---- | C] () -- C:\Windows\game.ini
[2011/01/17 16:46:02 | 000,032,768 | ---- | C] () -- C:\Windows\System32\LXCTFXPU.DLL
[2011/01/17 16:46:01 | 000,045,056 | ---- | C] () -- C:\Windows\System32\lxctpmon.dll
[2011/01/17 16:33:39 | 000,000,048 | ---- | C] () -- C:\Windows\WinInit.Ini
[2011/01/05 19:13:48 | 000,000,901 | ---- | C] () -- C:\Users\Rotem\.drjava
[2010/12/23 20:04:03 | 000,000,262 | ---- | C] () -- C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini
[2010/10/14 23:31:08 | 003,930,788 | ---- | C] () -- C:\Users\Rotem\test.zip
[2010/07/15 04:34:20 | 000,004,096 | -H-- | C] () -- C:\Users\Rotem\AppData\Local\keyfile3.drm
[2010/07/04 18:49:37 | 000,007,605 | ---- | C] () -- C:\Users\Rotem\AppData\Local\Resmon.ResmonCfg
[2010/06/21 23:38:00 | 000,000,600 | ---- | C] () -- C:\Users\Rotem\AppData\Local\PUTTY.RND
[2010/05/17 13:22:25 | 000,025,260 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\addons.dat
[2010/05/06 21:57:21 | 000,000,600 | ---- | C] () -- C:\Users\Rotem\AppData\Roaming\winscp.rnd
========== ZeroAccess Check ==========
[2012/10/05 23:27:04 | 000,002,048 | -HS- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\@
[2012/10/05 23:27:04 | 000,077,312 | -HS- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\n
[2012/11/30 18:04:56 | 000,000,000 | -HSD | M] -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\L
[2012/11/30 18:04:55 | 000,000,000 | -HSD | M] -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U
[2012/12/02 13:30:34 | 000,000,804 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\L\00000004.@
[2012/10/05 23:27:36 | 000,002,048 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U\00000004.@
[2012/10/05 23:27:19 | 000,232,960 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U\00000008.@
[2012/10/05 23:27:36 | 000,001,632 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U\000000cb.@
[2012/10/28 05:38:45 | 000,011,776 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U\80000000.@
[2012/11/30 18:04:55 | 000,096,256 | ---- | M] () -- C:\$Recycle.bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\U\80000032.@
[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[2012/12/02 13:30:31 | 000,005,120 | -HS- | M] () -- C:\Windows\assembly\GAC\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
"ThreadingModel" = Both
"" = C:\$Recycle.Bin\S-1-5-21-2951300007-1305687417-2819150053-1000\$2f77722623aa3c711c731fbc83eb5377\n. -- File not found
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\$Recycle.Bin\S-1-5-18\$2f77722623aa3c711c731fbc83eb5377\n. -- [2012/10/05 23:27:04 | 000,077,312 | -HS- | M] ()
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2012/08/23 19:48:53 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\.minecraft
[2012/03/26 20:42:10 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\.minecraftsl
[2012/04/09 15:12:49 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\.mineshaftersquared
[2010/10/20 22:31:24 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\5400 Series
[2012/02/10 23:12:59 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Ahoxra
[2011/06/05 02:41:21 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\App Launcher Gadget
[2012/11/03 19:38:10 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Atari
[2012/05/03 15:51:34 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Audacity
[2010/09/10 13:32:08 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\AutoHideIP
[2012/03/02 21:04:19 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Avutup
[2012/04/24 13:31:31 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Babylon
[2012/11/22 20:01:12 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\BackupTrans
[2012/11/26 01:55:26 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\BitComet
[2012/05/31 22:48:41 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\BitTorrent
[2011/07/16 03:14:38 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\BSplayer Pro
[2011/11/13 07:08:53 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\cacaoweb
[2011/07/01 20:42:28 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012/11/22 20:49:54 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Contact Sms Transfer
[2012/11/07 02:47:38 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\CorsixTH
[2012/12/02 13:24:45 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\DAEMON Tools Lite
[2012/03/01 15:44:25 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Deotys
[2012/03/01 23:13:45 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Dion
[2010/05/07 14:26:46 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\DiskAid
[2011/12/22 23:10:26 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\DMCache
[2012/01/04 22:05:42 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Downloaded Installations
[2012/12/02 13:31:58 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Dropbox
[2012/03/05 10:25:42 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Duym
[2011/10/23 21:11:16 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\DVDVideoSoft
[2011/10/23 21:10:57 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\DVDVideoSoftIEHelpers
[2010/03/11 21:19:42 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\FlashFXP
[2012/11/18 21:05:17 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\GameRanger
[2012/11/18 21:39:13 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\GarenaPlus
[2010/07/03 01:23:23 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Hide IP NG
[2010/11/18 15:30:56 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\ICQ
[2012/03/05 10:25:45 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Ikikas
[2012/05/27 01:15:16 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Launchy
[2010/07/13 20:47:10 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Leadertech
[2011/05/25 17:20:02 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\LolClient
[2012/05/24 12:06:22 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\LolClient2
[2012/05/17 20:49:44 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Mumble
[2012/04/18 03:06:59 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\My Battle for Middle-earth II Files
[2011/01/19 19:24:41 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\MySQL
[2010/08/15 17:56:45 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Need for Speed World
[2011/01/29 10:43:12 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Notepad++
[2010/05/17 23:06:55 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\ooVoo Details
[2012/02/25 22:51:35 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Origin
[2010/06/16 01:20:03 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\PC Suite
[2012/11/19 21:05:27 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\phpDesigner
[2011/07/30 15:21:58 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Prison Break
[2011/11/19 11:58:50 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\ProtectDISC
[2012/02/03 21:43:17 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Publish Providers
[2012/05/29 17:24:07 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Red Alert 3
[2010/07/17 02:58:08 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Red Alert 3 Uprising
[2012/10/19 23:15:07 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\redsn0w
[2012/10/14 01:20:03 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\RegExr.8CE3EE8FC37F7781C562DFF80977CFBA322DD1EF.1
[2011/12/04 18:43:30 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\SA-MP Audio Plugin
[2012/08/15 14:02:36 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Samsung
[2010/03/26 23:36:18 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\SMSender
[2012/02/07 20:13:51 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Sony
[2012/06/05 15:47:28 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Sony Creative Software Inc
[2010/06/28 00:54:28 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Stardock
[2011/06/03 20:21:29 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Steinberg
[2010/05/18 13:34:24 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\system32
[2010/12/13 20:43:23 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\TeamViewer
[2010/08/17 18:50:19 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Tific
[2011/04/08 15:22:48 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\TightVNC
[2012/12/02 16:43:33 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\TS3Client
[2011/04/21 03:36:55 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\ts3overlay
[2010/04/21 14:17:59 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Ubisoft
[2012/02/15 22:05:55 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Uglyi
[2011/09/10 14:11:51 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Ulead Systems
[2011/07/01 21:04:17 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\UnH Solutions
[2012/12/02 13:24:41 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\uTorrent
[2011/05/08 13:01:08 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\ValuSoft
[2011/11/22 19:03:09 | 000,000,000 | -H-D | M] -- C:\Users\Rotem\AppData\Roaming\Windows
[2011/09/21 22:17:34 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Wippien
[2010/10/15 23:43:58 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\wxChecksums
[2012/12/02 16:31:29 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\XBMC
[2012/02/09 12:56:08 | 000,000,000 | ---D | M] -- C:\Users\Rotem\AppData\Roaming\Ydcenu
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 125 bytes -> C:\ProgramData\TEMP:D73C9AB3
@Alternate Data Stream - 112 bytes -> C:\ProgramData\TEMP:D1B5B4F1
< End of report >
Extras File:
OTL Extras logfile created on: 02/12/2012 18:41:59 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Rotem\Downloads
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 0000040d | Country: ישראל | Language: HEB | Date Format: dd/MM/yyyy
2.00 Gb Total Physical Memory | 0.89 Gb Available Physical Memory | 44.30% Memory free
4.00 Gb Paging File | 1.55 Gb Available in Paging File | 38.83% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 97.56 Gb Total Space | 8.32 Gb Free Space | 8.53% Space Free | Partition Type: NTFS
Drive D: | 200.43 Gb Total Space | 26.39 Gb Free Space | 13.17% Space Free | Partition Type: NTFS
Drive E: | 93.15 Gb Total Space | 7.79 Gb Free Space | 8.36% Space Free | Partition Type: NTFS
Drive F: | 93.15 Gb Total Space | 0.51 Gb Free Space | 0.54% Space Free | Partition Type: NTFS
Drive H: | 6.10 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: UDF
Computer Name: ROTEM-PC | User Name: Rotem | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.ini [@ = Notepad++_file] -- C:\Program Files\Notepad++\notepad++.exe (Don HO [email protected])
.txt [@ = Notepad++_file] -- C:\Program Files\Notepad++\notepad++.exe (Don HO [email protected])
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- "%1" %*
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== Firewall Settings ==========
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00F93853-D9D3-4795-A89E-84CCBA0205C9}" = Microsoft IntelliPoint 8.0
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05855322-BE43-41FE-B583-D3AE0C326D58}" = Microsoft Silverlight 4 SDK
"{09C52940-A4D1-4409-A7CC-1AAE630CF578}" = Microsoft SQL Server 2008 R2 Transact-SQL Language Service
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0EDC9BA0-016E-406a-86DA-04FC1BE00C21}" = Need for Speed™ The Run
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{10CD364B-FFCC-48BE-B469-B9622A033075}" = Fences
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2
"{196E77C5-F524-4B50-BD1A-2C21EEE9B8F7}" = Microsoft SQL Server 2008 Common Files
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{1B6C0E95-182C-48E0-9C4B-4F916308249C}" = iTunes
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{2511AAD7-82DF-4B97-B0B3-E1B933317010}" = Windows Live Writer Resources
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java 6 Update 37
"{296D8550-CB06-48E4-9A8B-E5034FB64715}" = Command & Conquer™ Red Alert™ 3
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = The Battle for Middle-earth II
"{2C4E06CC-1F04-4C25-8B3C-93A9049EC42C}" = Windows Live UX Platform Language Pack
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86
"{2FDD750F-49B7-40C1-9D5E-D2955BC0E2D8}" = NVIDIA PhysX
"{3008CE00-F04D-47B6-B5DB-E11F7593754D}" = sClient+ Anti-Cheat
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{33286280-8617-11E1-8FF6-B8AC6F97B88E}" = Google Earth Plug-in
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3A4D5E2D-988D-4ee9-8E7F-3AC200A2B8F5}" = 4500G510nz_Software_Min
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{40416836-56CC-4C0E-A6AF-5C34BADCE483}" = Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools
"{41A01180-D9FD-3428-9FD6-749F4C637CBF}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{45518B6D-9DDF-4144-83E4-A56762524F35}" = USB2.0 Grabber
"{459699C3-9430-4381-964B-4248D87B49F9}" = Apple Mobile Device Support
"{46F8CF66-AB83-38A7-99B2-A5BE507EE472}" = Microsoft Visual C++ 2010 Express - ENU
"{470C8EFE-AEB0-402E-B05A-91E08C208F7C}" = Nero 8 Essentials
"{4815BD99-96A4-49FE-A885-DCF06E9E4E78}" = Microsoft SQL Server 2008 Database Engine Shared
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4EAB2511-0135-48CA-A47B-CE1E6836793A}" = COMODO Internet Security
"{4eba0677-ae14-4774-819f-f794c68e5862}" = Microsoft Visual Studio 11 Professional Beta
"{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1" = Data Lifeguard Diagnostic for Windows 1.22
"{5454083B-1308-4485-BF17-1110000B8301}" = Grand Theft Auto IV
"{5454083B-1308-4485-BF17-1110000D8301}" = Grand Theft Auto IV
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{57BB52B7-6B7B-31F3-89F4-4EE8FE5CEF6D}" = Microsoft Help Viewer 1.1
"{58721EC3-8D4E-4B79-BC51-1054E2DDCD10}" = Microsoft SQL Server 2008 Database Engine Services
"{59F24743-2EA1-3A45-B8C2-6E0E1E078FA8}" = Microsoft Visual C# 2010 Express - ENU
"{5AB7D739-1735-3A9E-BE73-C43507CB4E6F}" = Microsoft Visual Studio 2010 Service Pack 1
"{5B05FF91-F20C-4832-A8DE-E1912639C17C}" = 4500G510nz
"{5B161932-9D42-4D5E-858D-29BF4C670944}" = Microsoft SQL Server 2008 Setup Support Files
"{5CA86DBC-3F01-09AF-C67C-99557DB3E1F5}" = ATI Catalyst Install Manager
"{5D90E53A-BD7C-8F32-9B82-7733D0F0BC8E}" = Adobe Download Assistant
"{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{690879A5-18EF-447B-98D6-B699D51008AB}" = 4500_G510nz_Help
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6E36A172-06FB-4BC8-B7FC-D30D219E6776}" = Tom Clancy's H.A.W.X
"{6ED37A91-7710-3183-BE50-AB043FF6689E}" = Microsoft Team Foundation Server 2010 Object Model - ENU
"{6F340107-F9AA-47C6-B54C-C3A19F11553F}" = Hewlett-Packard ACLM.NET v1.1.0.0
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75247E38-5C9B-45D6-ADF8-E11CB56B4990}" = Network
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}" = Microsoft SQL Server 2008 R2 Management Objects
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A56D81D-6406-40E7-9184-8AC1769C4D69}" = Microsoft SQL Server 2008 R2 Data-Tier Application Project
"{7C2013E3-00B9-4DA7-81D3-215C75FD5B45}" = livePCsupport Client
"{7E0E61CC-1C99-429D-BEA7-C4DD5B898D2A}" = HP Officejet 4500 G510n-z
"{804DE397-F82C-4867-9085-E0AA539A3294}" = Windows Live Writer
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{85467CBC-7A39-33C9-8940-D72D9269B84F}" = Microsoft Visual F# 2.0 Runtime
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{877B76B2-F83F-4F5A-B28D-3F398641ADB6}" = Microsoft SQL Server System CLR Types
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8136 8168 8169 Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{8F66047B-1AF3-40D9-80D7-106E2EDC2C2A}" = EPU-4 Engine
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0015-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0015-040D-0000-0000000FF1CE}" = Microsoft Office Access MUI (Hebrew) 2010
"{90140000-0015-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0016-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-040D-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Hebrew) 2010
"{90140000-0016-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0017-040D-0000-0000000FF1CE}" = Microsoft Office SharePoint Designer MUI (Hebrew) 2010
"{90140000-0017-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{6577D8F3-AA3C-4BCF-8263-8B6A3E6BFC98}" = Microsoft SharePoint Designer 2010 Service Pack 1 (SP1)
"{90140000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0018-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-040D-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Hebrew) 2010
"{90140000-0018-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-0019-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-040D-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Hebrew) 2010
"{90140000-0019-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001A-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-040D-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Hebrew) 2010
"{90140000-001A-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001B-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-040D-0000-0000000FF1CE}" = Microsoft Office Word MUI (Hebrew) 2010
"{90140000-001B-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0401-0000-0000000FF1CE}" = Microsoft Office Proof (Arabic) 2010
"{90140000-001F-0401-0000-0000000FF1CE}_Office14.OMUI.he-il_{1A43C155-3DDA-43C9-92C5-0E7D0B2B156D}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.OMUI.he-il_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.PROPLUS_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.OMUI.he-il_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.PROPLUS_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040D-0000-0000000FF1CE}" = Microsoft Office Proof (Hebrew) 2010
"{90140000-001F-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{16C5AEEC-D632-4FAA-BFDC-BBF36F473E09}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0419-0000-0000000FF1CE}" = Microsoft Office Proof (Russian) 2010
"{90140000-001F-0419-0000-0000000FF1CE}_Office14.OMUI.he-il_{DD6E7CDF-BDFF-43CF-8CCE-84FBEC5ABB77}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.PROPLUS_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-002C-0409-0000-0000000FF1CE}_Office14.PROPLUS_{7CA93DF4-8902-449E-A42E-4C5923CFBDE3}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-040D-0000-0000000FF1CE}" = Microsoft Office Proofing (Hebrew) 2010
"{90140000-002C-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{6DE4A120-C7C5-4DED-AA3E-F32EE37012C5}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-0044-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0044-040D-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Hebrew) 2010
"{90140000-0044-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-006E-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-040D-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Hebrew) 2010
"{90140000-006E-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{C52DDB57-C2DE-4CBE-ABF8-EF39F9F396B2}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00A1-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-040D-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Hebrew) 2010
"{90140000-00A1-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-00BA-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00BA-040D-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Hebrew) 2010
"{90140000-00BA-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{30CB2A7E-01CF-428F-A639-B43983311EEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0100-040D-0000-0000000FF1CE}" = Microsoft Office O MUI (Hebrew) 2010
"{90140000-0100-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{1A016848-B5D0-476C-8677-E7B004B471C6}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0101-040D-0000-0000000FF1CE}" = Microsoft Office X MUI (Hebrew) 2010
"{90140000-0101-040D-0000-0000000FF1CE}_Office14.OMUI.he-il_{74945BC1-CCF9-4CCE-978F-A475DA4A3468}" = Microsoft Office 2010 Language Pack Service Pack 1 (SP1)
"{90140000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0115-0409-0000-0000000FF1CE}_Office14.PROPLUS_{4560037C-E356-444A-A015-D21F487D809E}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{90140000-0117-0409-0000-0000000FF1CE}_Office14.PROPLUS_{6BD185A0-E67F-4F77-8BCD-E34EA6AE76DF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile Device Center
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{92A51949-EE4C-466D-AAF0-99E74A49A63F}" = DocMgr
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{94317163-C5D1-4FCE-A0D9-F48FE06A7D7D}" = Microsoft SQL Server 2008 Native Client
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95140000-007A-040D-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95140000-007D-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{96E3AED5-3D0B-4BB0-84C2-1EDADB204487}" = FlashFXP v4.0
"{97CE8B73-AA5A-4987-A1BE-50DD1A187478}" = Microsoft Sync Framework SDK v1.0 SP1
"{97E12F84-C033-4DA2-97D2-F540C3E292EA}" = Installer
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DB90178-B5B0-45BD-B0A7-D40A6A1DF1CA}" = Windows Live Movie Maker
"{9E1BAB75-EB78-440D-94C0-A3857BE2E733}" = System Requirements Lab
"{A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}" = Logitech GamePanel Software 3.06.109
"{A436F67F-687E-4736-BD2B-537121A804CF}" = HP Product Detection
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A80FA752-C491-4ED9-ABF0-4278563160B2}" = 32 Bit HP CIO Components Installer
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{A8EC0CC0-AD8D-4244-B080-424EDF7A7634}" = Native Instruments Traktor 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A975AAA7-081E-35A1-80E1-430FDECC944A}" = Microsoft Visual C++ 11 x86 Additional Runtime - 11.0.50214
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer
"{ABD534B7-E951-470E-92C2-CD5AF1735726}" = Windows Live Essentials
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.4)
"{ACE28263-76A4-4BF5-B6F4-8BD719595969}" = Microsoft SQL Server Database Publishing Wizard 1.4
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{AEEB3643-71DE-414d-9E3F-1159177FE211}" = Office Animation Runtime
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B2BCA478-EC0F-45EE-A9E9-5EABE87EA72D}" = Windows Live Photo Common
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Driver 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Control Panel 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Graphics Driver 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller Driver 306.23
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX System Software 9.12.0604
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.10.8
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B3D1CFF9-C5DA-3590-894B-40821DDB67C5}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}" = Microsoft SQL Server 2008 Database Engine Services
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B857D868-F8B0-43EE-BC2B-D9E5ED21F237}" = Microsoft SQL Server VSS Writer
"{BC537AE0-88AF-47ED-B762-33B0D62B5188}" = Microsoft SQL Server 2008 R2 Data-Tier Application Framework
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = The Sims™ 3
"{C12631C6-804D-4B32-B0DD-8A496462F106}" = The Sims™ 3 Pets
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C688457E-03FD-4941-923B-A27F4D42A7DD}" = Microsoft SQL Server 2008 Browser
"{C6DD625F-4B61-4561-8286-87CA0275CEA1}" = Microsoft Sync Framework Runtime v1.0 SP1 (x86)
"{C95A5A77-622F-45CA-9540-84468FCB18B1}" = Windows Live Messenger
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CAE017F8-C238-4397-879B-7FBB915D9457}" = LogMeIn Hamachi
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCE825DB-347A-4004-A186-5F4A6FDD8547}" = Apple Application Support
"{CE929F09-3853-4180-BD90-30764BFF7136}" = גלריית התמונות של Windows Live
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D6B3114F-945B-4980-BF7A-AF12E9161A0F}" = iCloud
"{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}" = WCF RIA Services V1.0 SP1
"{dbf56337-7459-4a20-9a7f-1d39bde9b436}" = Microsoft Visual Studio 11 Developer Preview Pre-Clean Tool
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DC3D6AFB-78B4-489F-81D7-30B66E0C2417}" = Microsoft Sync Services for ADO.NET v2.0 SP1 (x86)
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E6F012B0-E930-11E0-A67A-F04DA23A5C58}" = Vegas Pro 11.0
"{E9627240-E930-11E0-8690-F04DA23A5C58}" = MSVCRT Redists
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{E989D16F-0B39-4E74-8BD5-149BEE1477FE}" = Microsoft SQL Server 2008 RsFx Driver
"{EA1B6EBB-B623-22ED-B5EB-7D574DCAD521}" = RegExr
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F8A10A25-D8DD-4661-9A1E-7F6DBAAA3C5E}" = inSSIDer
"{F8D8BD82-168D-31DD-9A07-C365A7A84F07}" = Microsoft Visual C++ 11 x86 Debug Runtime - 11.0.50214
"{F990B526-8F7C-46E0-B1F1-6C893A8B478F}" = Microsoft Sync Framework Services v1.0 SP1 (x86)
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AMX Mod X Installer" = AMX Mod X Installer 1.8.1
"Avisynth" = AviSynth 2.5
"Babylon" = Babylon
"BitComet" = BitComet 1.31
"CCleaner" = CCleaner
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"DAEMON Tools Lite" = DAEMON Tools Lite
"Data Access Objects (DAO) 3.5" = Data Access Objects (DAO) 3.5
"Duplicate Cleaner" = Duplicate Cleaner 2.0.6
"Emergency 2013" = Emergency 2013
"ESN Sonar-0.70.0" = ESN Sonar
"Eurobattle.net1.26" = Eurobattle.net
"Fences" = Fences
"Garena Classic 2011" = Garena Classic 2011
"HP Document Manager" = HP Document Manager 2.0
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"iLivid" = iLivid
"im" = Garena Plus
"InstallShield_{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"InstallShield_{97E12F84-C033-4DA2-97D2-F540C3E292EA}" = SWAT 4 - The Stetchkov Syndicate
"KLiteCodecPack_is1" = K-Lite Mega Codec Pack 5.0.0
"Launchy_21344213_is1" = Launchy 2.5
"LogMeIn Hamachi" = LogMeIn Hamachi
"Mark's Mod v11" = Mark's Mod v11
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft Team Foundation Server 2010 Object Model - ENU" = Microsoft Team Foundation Server 2010 Object Model - ENU
"Microsoft Visual C# 2010 Express - ENU" = Microsoft Visual C# 2010 Express - ENU
"Microsoft Visual C++ 2010 Express - ENU" = Microsoft Visual C++ 2010 Express - ENU
"Microsoft Visual Studio 2010 Service Pack 1" = Microsoft Visual Studio 2010 Service Pack 1
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"mIRC" = mIRC
"Mozilla Firefox 11.0 (x86 he)" = Mozilla Firefox 11.0 (x86 he)
"Mp3 Knife_is1" = Mp3 Knife 3.2
"MTA:SA 1.3" = MTA:SA v1.3
"Native Instruments Traktor 2" = Native Instruments Traktor 2
"Notepad++" = Notepad++
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.OMUI.he-il" = Microsoft Office Language Pack 2010 - Hebrew עברית
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"Origin" = Origin
"phpDesigner8_is1" = phpDesigner 8 version 8.1
"PRGrep" = PRGrep
"PunkBusterSvc" = PunkBuster Services
"R-Client v1" = R-Client v1
"Recuva" = Recuva
"RegExr.8CE3EE8FC37F7781C562DFF80977CFBA322DD1EF.1" = RegExr
"Rotem657 Toolbar" = Rotem657 Toolbar
"Samsung Mobile phone USB driver Drive" = Samsung Mobile phone USB driver Drive Software
"ShapeCollage" = Shape Collage
"Shop for HP Supplies" = Shop for HP Supplies
"Steam App 10" = Counter-Strike
"Steam App 215" = Source SDK Base 2006
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 7" = TeamViewer 7
"Theme Park World" = Theme Park World
"TS3 Overlay" = TS3 Overlay
"uTorrent" = µTorrent
"VentriloMix1.2" = VentriloMix
"VobSub" = VobSub 2.23
"WampServer 2_is1" = WampServer 2.0
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"winscp3_is1" = WinSCP 5.1
"Xfire" = Xfire
"Your Product1.0" = Your Product
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"XBMC" = XBMC
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 02/12/2012 07:30:43 | Computer Name = Rotem-PC | Source = ESENT | ID = 455
Description = Windows (5208) Windows: Error -1811 occurred while opening logfile
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS026BA.log.
Error - 02/12/2012 07:30:44 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 9000
Description =
Error - 02/12/2012 07:30:44 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 7040
Description =
Error - 02/12/2012 07:30:44 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 7042
Description =
Error - 02/12/2012 07:30:44 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 9002
Description =
Error - 02/12/2012 07:30:44 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 3029
Description =
Error - 02/12/2012 07:31:07 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 3029
Description =
Error - 02/12/2012 07:31:07 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 3028
Description =
Error - 02/12/2012 07:31:07 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 3058
Description =
Error - 02/12/2012 07:31:07 | Computer Name = Rotem-PC | Source = Windows Search Service | ID = 7010
Description =
[ Media Center Events ]
Error - 27/03/2011 10:40:27 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 16:40:27 - Failed to retrieve Directory (Error: Unable to connect
to the remote server)
Error - 27/03/2011 10:42:15 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 16:41:54 - Failed to retrieve MCESpotlight (Error: Unable to connect
to the remote server)
Error - 27/03/2011 10:42:57 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 16:42:36 - Failed to retrieve MCEClientUX (Error: Unable to connect
to the remote server)
Error - 27/03/2011 10:43:27 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 16:43:18 - Failed to retrieve Broadband (Error: Unable to connect
to the remote server)
Error - 27/03/2011 11:43:59 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 17:43:59 - Error connecting to the internet. 17:43:59 - Unable
to contact server..
Error - 27/03/2011 11:44:51 | Computer Name = Rotem-PC | Source = MCUpdate | ID = 0
Description = 17:44:46 - Error connecting to the internet. 17:44:46 - Unable
to contact server..
[ System Events ]
Error - 02/12/2012 07:29:28 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7003
Description = The IPsec Policy Agent service depends the following service: BFE.
This service might not be installed.
Error - 02/12/2012 07:30:12 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Windows
Live ID Sign-in Assistant service to connect.
Error - 02/12/2012 07:30:12 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7000
Description = The Windows Live ID Sign-in Assistant service failed to start due
to the following error: %%1053
Error - 02/12/2012 07:31:08 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7024
Description = The Windows Search service terminated with service-specific error
%%-1073473535.
Error - 02/12/2012 07:31:08 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7031
Description = The Windows Search service terminated unexpectedly. It has done this
1 time(s). The following corrective action will be taken in 30000 milliseconds:
Restart the service.
Error - 02/12/2012 07:31:45 | Computer Name = Rotem-PC | Source = DCOM | ID = 10016
Description =
Error - 02/12/2012 07:31:43 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7023
Description = The Function Discovery Resource Publication service terminated with
the following error: %%-2147024891
Error - 02/12/2012 07:31:43 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7001
Description = The HomeGroup Provider service depends on the Function Discovery Resource
Publication service which failed to start because of the following error: %%-2147024891
Error - 02/12/2012 07:32:28 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7038
Description = The nvUpdatusService service was unable to log on as .\UpdatusUser
with the currently configured password due to the following error: %%1330 To ensure
that the service is configured properly, use the Services snap-in in Microsoft
Management Console (MMC).
Error - 02/12/2012 07:32:28 | Computer Name = Rotem-PC | Source = Service Control Manager | ID = 7000
Description = The NVIDIA Update Service Daemon service failed to start due to the
following error: %%1069
< End of report >
Tnx for help.
Rotem
Edited by XpOz, 02 December 2012 - 11:11 AM.