Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Programs keep crashing, might be malware/virus related.


  • Please log in to reply

#1
nochiro

nochiro

    New Member

  • Member
  • Pip
  • 4 posts
Okay.. So after I updated my windows through windows update (windows 7) every time I open up a .exe file it crashes instantly. In the behinning it happened once or twice, retrying worked, but now after a while restarting the program(s) does not nesecarily work anymore. Browsers seem to work somewhat fine, at least chrome. IE keeps crashing (used it to run pcpitstop ( http://www.pcpitstop...?conid=25400675 ).

OTL logs:

OTL logfile created on: 12.08.2013 23:35:31 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emil\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy

7,90 Gb Total Physical Memory | 5,59 Gb Available Physical Memory | 70,74% Memory free
15,80 Gb Paging File | 13,23 Gb Available in Paging File | 83,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 196,99 Gb Free Space | 42,30% Space Free | Partition Type: NTFS
Drive D: | 6,35 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: EMIL-PC | User Name: Emil | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013.08.12 23:35:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Emil\Downloads\OTL.exe
PRC - [2013.07.25 02:49:49 | 000,846,288 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.04.11 13:12:30 | 004,727,296 | ---- | M] () -- C:\Program Files (x86)\Hotkey\Hotkey.exe
PRC - [2012.03.26 04:14:26 | 000,291,608 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
PRC - [2012.03.25 22:32:22 | 000,276,248 | ---- | M] (Intel Corporation) -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe
PRC - [2012.03.14 15:48:22 | 000,362,840 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
PRC - [2012.03.14 15:48:20 | 000,276,824 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
PRC - [2012.03.14 15:48:06 | 000,162,648 | R--- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe
PRC - [2011.11.29 21:04:56 | 000,013,592 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2011.11.29 21:04:54 | 000,284,440 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
PRC - [2011.02.18 16:57:30 | 000,035,328 | ---- | M] () -- C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
PRC - [2010.11.01 14:25:36 | 001,374,720 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
PRC - [2008.12.05 15:44:44 | 000,053,248 | ---- | M] (Bison Inc.) -- C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe


========== Modules (No Company Name) ==========

MOD - [2013.08.11 20:13:01 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\46e5c98ee0b6840ffbc7875ec30e6b38\Microsoft.VisualBasic.ni.dll
MOD - [2013.08.11 20:12:23 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\a7a3ebc76a454af37918211506e81e31\System.Management.ni.dll
MOD - [2013.08.11 20:12:23 | 000,487,424 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\5ff75dafe0bda546dc6c71d2cb2d5257\IAStorUtil.ni.dll
MOD - [2013.08.11 20:12:23 | 000,014,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\6e3778958a8bfd03bf0f2f60c4e25623\IAStorCommon.ni.dll
MOD - [2013.08.11 20:10:24 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\f752f8cf702b7c7eff6c659b2e0c760a\System.ServiceProcess.ni.dll
MOD - [2013.08.11 20:10:16 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\89fe719039385377f6b5ad8d0070aa6b\System.Runtime.Remoting.ni.dll
MOD - [2013.08.11 20:10:09 | 014,340,096 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\fc4a8709f71eba20cc71c7905bba3dee\PresentationFramework.ni.dll
MOD - [2013.08.11 20:10:01 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\178644ab40108f3becd8b91049a254c3\System.Windows.Forms.ni.dll
MOD - [2013.08.11 20:09:57 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\bfa7a95284aec941f4b03bae0debe07c\System.Drawing.ni.dll
MOD - [2013.08.11 20:09:55 | 012,238,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\ef17be93e209cc95b9768c7822530432\PresentationCore.ni.dll
MOD - [2013.08.11 20:09:49 | 003,348,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c25666b99761bc42322bae2e59968df8\WindowsBase.ni.dll
MOD - [2013.08.11 20:09:46 | 005,464,064 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\32066405eb9ab14056b2af3115d2a6de\System.Xml.ni.dll
MOD - [2013.08.11 20:09:44 | 007,989,760 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\187c13e8967097d2ed1e5f123e7d890a\System.ni.dll
MOD - [2013.08.11 20:09:44 | 000,978,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\9e24b9ffd816c0c90efc4d3fc9fd745f\System.Configuration.ni.dll
MOD - [2013.08.11 20:09:40 | 011,499,520 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll
MOD - [2013.07.25 02:49:46 | 000,396,240 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppgooglenaclpluginchrome.dll
MOD - [2013.07.25 02:49:45 | 013,599,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
MOD - [2013.07.25 02:49:44 | 004,052,944 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll
MOD - [2013.07.25 02:48:51 | 001,597,392 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ffmpegsumo.dll
MOD - [2012.04.11 13:12:30 | 004,727,296 | ---- | M] () -- C:\Program Files (x86)\Hotkey\Hotkey.exe
MOD - [2009.06.06 15:50:32 | 000,019,968 | ---- | M] () -- C:\Program Files (x86)\Hotkey\Audiodll.dll


========== Services (SafeList) ==========

SRV:64bit: - [2013.05.27 07:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2012.03.29 02:08:02 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2012.02.26 06:07:52 | 002,669,840 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe -- (ZeroConfigService)
SRV:64bit: - [2012.02.26 06:07:42 | 000,273,168 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV:64bit: - [2012.02.26 06:07:32 | 000,626,960 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV:64bit: - [2012.02.26 06:07:26 | 000,148,752 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV:64bit: - [2012.02.02 23:29:52 | 000,628,448 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel®
SRV:64bit: - [2012.01.17 17:12:28 | 000,135,952 | ---- | M] (Intel® Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr)
SRV:64bit: - [2012.01.09 13:39:44 | 000,659,968 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3)
SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013.07.31 00:47:46 | 000,117,656 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.07.27 00:46:24 | 000,563,624 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013.06.03 16:21:54 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013.02.25 16:01:31 | 001,045,256 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.03.25 22:32:22 | 000,276,248 | ---- | M] (Intel Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs)
SRV - [2012.03.14 15:48:22 | 000,362,840 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe -- (UNS)
SRV - [2012.03.14 15:48:20 | 000,276,824 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2012.03.14 15:48:06 | 000,162,648 | R--- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\Jhi_service.exe -- (jhi_service)
SRV - [2011.11.29 21:04:56 | 000,013,592 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2011.02.18 16:57:30 | 000,035,328 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hotkey\PowerBiosServer.exe -- (PowerBiosServer)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013.03.31 22:06:27 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013.02.14 02:33:06 | 000,037,472 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdkmpfd.sys -- (amdkmpfd)
DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.07.17 18:12:08 | 000,062,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64)
DRV:64bit: - [2012.05.08 16:06:42 | 000,293,992 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsBaStor.sys -- (RSBASTOR)
DRV:64bit: - [2012.04.19 18:36:26 | 000,035,256 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\intelaud.sys -- (intaud_WaveExtensible)
DRV:64bit: - [2012.04.19 18:36:26 | 000,025,528 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iwdbus.sys -- (iwdbus)
DRV:64bit: - [2012.03.29 02:42:58 | 010,859,008 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.03.29 01:08:10 | 000,328,704 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.03.26 04:13:20 | 000,789,272 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV:64bit: - [2012.03.26 04:13:20 | 000,356,632 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\iusb3hub.sys -- (iusb3hub)
DRV:64bit: - [2012.03.26 04:13:18 | 000,019,224 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV:64bit: - [2012.03.25 22:09:54 | 014,748,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdpmd64.sys -- (intelkmd)
DRV:64bit: - [2012.03.08 23:41:16 | 000,685,160 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.20 13:36:58 | 011,471,872 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Netwsw00.sys -- (NETwNs64)
DRV:64bit: - [2012.01.09 13:32:40 | 000,195,584 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP)
DRV:64bit: - [2012.01.09 13:32:40 | 000,195,584 | ---- | M] (Windows ® Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL)
DRV:64bit: - [2011.12.05 08:23:08 | 000,331,264 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud)
DRV:64bit: - [2011.11.29 20:40:32 | 000,568,600 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)
DRV:64bit: - [2011.07.27 20:37:56 | 001,448,496 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://no.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = nb-NO
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F4 85 12 F7 9F 97 CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:23.0
FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@raidcall.en/RCplugin: C:\Users\Emil\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 23.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2013.08.12 23:12:06 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Emil\AppData\Roaming\Mozilla\Extensions
[2013.08.12 23:12:00 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions
[2013.08.12 23:12:00 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter},
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\28.0.1500.95\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIIPT.dll
CHR - plugin: Intel\u00AE Identity Protection Technology (Enabled) = C:\Program Files (x86)\Intel\Intel® Management Engine Components\IPT\npIntelWebAPIUpdater.dll
CHR - Extension: Google Docs = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Google Kalender = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0\
CHR - Extension: AdBlock = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.4_0\
CHR - Extension: Reddit Enhancement Suite = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb\4.3.0.1_0\
CHR - Extension: DotA 2 Match Ticker = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\nejdjlaibiicicciokonbbkecjleilon\1.6.2_0\
CHR - Extension: Media Hint = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbogbchcdigifagelnlmhlenmofdgbao\0.1.12_0\
CHR - Extension: Gmail = C:\Users\Emil\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [DeLay] C:\Program Files (x86)\BisonCam\PID_0361\DeLay.exe (Bison Inc.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [THXCfg64] C:\Windows\SysNative\THXCfg64.DLL (Creative Technology Ltd.)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [THX Audio Control Panel] C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [USB3MON] C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} http://www.pcpitstop...t/PCPitStop.CAB (PCPitstop Utility)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_43)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 217.13.7.140 217.13.4.24
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7739E79B-9145-4BDE-9A24-429DFDB40CFE}: DhcpNameServer = 217.13.7.140 217.13.4.24
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{085bfb32-7f4c-11e2-8203-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{085bfb32-7f4c-11e2-8203-806e6f6e6963}\Shell\AutoRun\command - "" = D:\autorun.exe
O33 - MountPoints2\{4b0899e7-85ff-11e2-a2a4-0090f5d5e03d}\Shell - "" = AutoRun
O33 - MountPoints2\{4b0899e7-85ff-11e2-a2a4-0090f5d5e03d}\Shell\AutoRun\command - "" = E:\autorun.exe
O33 - MountPoints2\{4b0899eb-85ff-11e2-a2a4-0090f5d5e03d}\Shell - "" = AutoRun
O33 - MountPoints2\{4b0899eb-85ff-11e2-a2a4-0090f5d5e03d}\Shell\AutoRun\command - "" = F:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013.08.12 23:12:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2013.08.12 23:12:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service
[2013.08.12 23:11:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2013.08.12 22:57:28 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2013.08.12 15:03:48 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\MRT
[2013.08.12 14:44:53 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur
[2013.08.12 00:54:02 | 000,000,000 | ---D | C] -- C:\ProgramData\SystemRequirementsLab
[2013.08.12 00:54:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SystemRequirementsLab
[2013.08.06 17:31:17 | 000,000,000 | ---D | C] -- C:\Users\Emil\Documents\Mine Spore-skapninger
[2013.08.06 17:31:15 | 000,000,000 | ---D | C] -- C:\Users\Emil\AppData\Roaming\SPORE
[2013.08.06 17:30:01 | 000,000,000 | RH-D | C] -- C:\Users\Emil\AppData\Roaming\SecuROM
[2013.08.06 17:24:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2013.08.06 17:12:21 | 000,000,000 | ---D | C] -- C:\Users\Emil\AppData\Roaming\Synthesia
[2013.08.06 17:12:13 | 000,000,000 | ---D | C] -- C:\Users\Emil\Documents\Synthesia Music
[2013.07.30 13:46:05 | 000,000,000 | ---D | C] -- C:\ProgramData\APN
[2013.07.27 20:31:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2013.07.26 22:42:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Mighty Quest For Epic Loot
[2013.07.26 22:42:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\The Mighty Quest For Epic Loot
[2013.07.26 02:33:41 | 000,000,000 | ---D | C] -- C:\Users\Emil\Desktop\Diamonds in the rough
[2013.07.25 03:00:10 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.07.24 15:39:38 | 000,000,000 | ---D | C] -- C:\Users\Emil\AppData\Roaming\Trine2
[2013.07.21 05:32:17 | 000,000,000 | ---D | C] -- C:\Users\Emil\Documents\mc
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013.08.12 23:21:00 | 000,000,988 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.08.12 23:12:01 | 000,001,151 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.08.12 23:06:40 | 000,014,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.08.12 23:06:40 | 000,014,512 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.08.12 23:04:25 | 000,779,266 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013.08.12 23:04:25 | 000,652,360 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013.08.12 23:04:25 | 000,121,292 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013.08.12 23:01:47 | 000,000,984 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.08.12 23:01:36 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.08.12 23:01:22 | 2066,063,359 | -HS- | M] () -- C:\hiberfil.sys
[2013.08.12 17:02:36 | 000,007,602 | ---- | M] () -- C:\Users\Emil\AppData\Local\Resmon.ResmonCfg
[2013.08.12 15:24:49 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.08.12 15:01:00 | 000,000,274 | ---- | M] () -- C:\Windows\tasks\PC Performer_DEFAULT.job
[2013.08.11 18:32:21 | 000,765,178 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.08.07 14:36:41 | 000,000,282 | ---- | M] () -- C:\Windows\tasks\PC Performer_UPDATES.job
[2013.07.31 23:25:10 | 000,002,183 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.07.26 22:42:52 | 000,001,402 | ---- | M] () -- C:\Users\Public\Desktop\The Mighty Quest For Epic Loot.lnk
[2013.07.26 02:37:16 | 003,358,261 | ---- | M] () -- C:\Users\Emil\Desktop\Diamonds in the rough.zip
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013.08.12 23:12:01 | 000,001,163 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2013.08.12 23:12:01 | 000,001,151 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2013.08.12 15:24:49 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.08.11 18:28:53 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013.08.11 18:21:02 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013.07.26 22:42:52 | 000,001,402 | ---- | C] () -- C:\Users\Public\Desktop\The Mighty Quest For Epic Loot.lnk
[2013.07.26 02:37:16 | 003,358,261 | ---- | C] () -- C:\Users\Emil\Desktop\Diamonds in the rough.zip
[2013.05.23 16:18:39 | 000,004,073 | ---- | C] () -- C:\Users\Emil\AppData\Local\recently-used.xbel
[2013.03.29 04:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013.03.29 04:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2013.03.06 02:18:19 | 000,765,178 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2013.03.05 21:12:02 | 000,007,602 | ---- | C] () -- C:\Users\Emil\AppData\Local\Resmon.ResmonCfg
[2013.02.25 23:26:44 | 000,703,117 | ---- | C] () -- C:\Users\Emil\AppData\Roaming\technic-launcher.jar
[2013.02.25 16:02:00 | 000,001,313 | ---- | C] () -- C:\Windows\THXCfg_SP_APOIM.ini
[2013.02.25 16:02:00 | 000,001,212 | ---- | C] () -- C:\Windows\THXCfg_HP_APOIM.ini
[2013.02.25 16:02:00 | 000,001,212 | ---- | C] () -- C:\Windows\THXCfg_APOIM.ini
[2013.02.25 16:01:56 | 000,185,856 | ---- | C] () -- C:\Windows\SysWow64\APOMngr.DLL
[2013.02.25 16:01:56 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\CmdRtr.DLL
[2013.02.25 15:47:00 | 000,000,101 | R--- | C] () -- C:\Windows\OEM.ini
[2013.02.25 15:47:00 | 000,000,020 | R--- | C] () -- C:\Windows\Bison.ini
[2013.02.25 15:35:40 | 000,066,856 | ---- | C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll
[2013.02.25 15:28:07 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2013.02.25 15:25:39 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblup.dat
[2013.02.25 15:25:06 | 013,024,768 | ---- | C] () -- C:\Windows\SysWow64\ig7icd32.dll
[2013.02.25 15:25:06 | 000,755,188 | ---- | C] () -- C:\Windows\SysWow64\igkrng700.bin
[2013.02.25 15:25:06 | 000,561,508 | ---- | C] () -- C:\Windows\SysWow64\igfcg700m.bin
[2013.02.25 15:25:06 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2013.02.25 15:25:06 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2013.02.25 15:25:06 | 000,058,880 | ---- | C] () -- C:\Windows\SysWow64\igdde32.dll
[2013.02.25 15:25:06 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2012.11.27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012.02.02 23:08:26 | 000,001,536 | ---- | C] () -- C:\Windows\SysWow64\IusEventLog.dll

========== ZeroAccess Check ==========

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2013.08.08 16:42:12 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\.minecraft
[2013.03.11 22:50:52 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\.technic
[2013.04.25 01:24:44 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\.techniclauncher
[2013.04.29 19:41:49 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\3909 LLC
[2013.06.06 19:29:53 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Audacity
[2013.03.08 19:28:57 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Beat Hazard
[2013.06.02 15:13:03 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Bitcoin
[2013.08.12 23:27:56 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\BitTorrent
[2013.04.29 19:31:26 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Crayon Physics Deluxe
[2013.08.12 15:26:17 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\DAEMON Tools Lite
[2013.03.08 21:20:16 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Dynamite Jack
[2013.02.25 20:04:11 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\e-academy Inc
[2013.04.21 22:35:17 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Firefly Studios
[2013.04.29 21:43:47 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\ftblauncher
[2013.04.12 18:25:57 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Image-Line
[2013.05.09 23:20:03 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Kalypso Media
[2013.04.25 01:24:33 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\logs
[2013.04.15 16:47:13 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\LolClient
[2013.03.07 21:58:36 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\NetBeans
[2013.02.26 04:02:42 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\OBS
[2013.02.25 20:43:31 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\OpenOffice.org
[2013.05.17 13:52:24 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\PerformerSoft
[2013.04.12 15:52:31 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\poclbm
[2013.03.12 01:44:44 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\puush
[2013.04.10 00:20:04 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\raidcall
[2013.06.19 16:54:04 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\runic games
[2013.08.06 17:31:35 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\SPORE
[2013.08.12 23:00:11 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Spotify
[2013.08.06 17:13:47 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Synthesia
[2013.04.11 20:12:03 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\SynthMaker
[2013.07.24 15:39:38 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Trine2
[2013.05.10 00:03:47 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Tropico 4
[2013.08.12 15:26:15 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\TS3Client
[2013.03.05 01:47:19 | 000,000,000 | ---D | M] -- C:\Users\Emil\AppData\Roaming\Ubisoft

========== Purity Check ==========



< End of report >


And extras

OTL Extras logfile created on: 12.08.2013 23:35:31 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Emil\Downloads
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000414 | Country: Norge | Language: NOR | Date Format: dd.MM.yyyy

7,90 Gb Total Physical Memory | 5,59 Gb Available Physical Memory | 70,74% Memory free
15,80 Gb Paging File | 13,23 Gb Available in Paging File | 83,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 196,99 Gb Free Space | 42,30% Space Free | Partition Type: NTFS
Drive D: | 6,35 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: EMIL-PC | User Name: Emil | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A2DC3B7-D448-48E5-B7FB-BB1FDC4DADA6}" = lport=137 | protocol=17 | dir=in | app=system |
"{0DCA1ECE-7B29-4E30-AA67-3DBC7CD792E3}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{18F7B2B7-AB2E-402F-ADC2-7A3B91817C7A}" = lport=445 | protocol=6 | dir=in | app=system |
"{1A805766-2009-486E-8535-8E0A808F9194}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1F7CA3D5-9893-4B49-B367-B89CA23BA781}" = lport=139 | protocol=6 | dir=in | app=system |
"{235A92A5-A131-4730-A957-BB5644053153}" = rport=10243 | protocol=6 | dir=out | app=system |
"{2F43A7BB-5B19-46C0-88BC-6C4882903EA8}" = rport=445 | protocol=6 | dir=out | app=system |
"{32971FC0-7CF2-42FA-B574-D00AE64807A5}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7A006330-C05C-494B-8552-A5D1039C9E98}" = rport=137 | protocol=17 | dir=out | app=system |
"{8775AE75-C7E3-49D0-B892-2C18E4F40527}" = lport=10243 | protocol=6 | dir=in | app=system |
"{A20D250A-9723-4669-968B-D289DB61C155}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{A5CB60EA-7BF6-436E-BD8F-B92BA8A81694}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AA70CADA-707B-463D-836D-AC84F40BF0BE}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B1DA4A75-6497-4D42-952F-BC8F58D9561B}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{B8A73ADF-68BC-48AA-B7CA-0A7A5C42223F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{BCDAA613-E19E-48F3-B90E-F9FCB6FFD016}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{BD3C269B-67B2-4D17-906B-01FAC2BEEFC7}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C0ABEFB5-D0C7-4F73-849B-A31BEC2CD42E}" = rport=138 | protocol=17 | dir=out | app=system |
"{C1C204A9-D026-4082-B37D-2BFDEB0D6F38}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{CE2F9952-9C76-4114-A0A8-3ACCF48BB34F}" = rport=139 | protocol=6 | dir=out | app=system |
"{EBF05D77-3061-4ACB-B319-66FF2D981646}" = lport=138 | protocol=17 | dir=in | app=system |
"{FC4605F0-CE8C-4B96-8916-1333271B8EE1}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00661A0C-C70B-456D-BD23-DCAA29C1EB01}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{02BC4035-7D67-4314-BE07-BB6F725D6CFE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{039AF965-355C-462D-A661-22BD4A427C2E}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{042D4C15-6260-4B83-A0BC-89CD367F73E7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\nightsky\nightsky.exe |
"{065E7ADA-D7A0-4CDB-9601-44F39C8257DB}" = protocol=58 | dir=out | [email protected],-28546 |
"{08576BDC-7C8B-49C8-A978-1625A5F91327}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{0AA23453-76C0-4263-B838-954BF5A36A57}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe |
"{0EAB7791-AFE0-4AA8-9376-AEA5A5BA23E4}" = protocol=6 | dir=in | app=c:\users\emil\appdata\roaming\bittorrent\bittorrent.exe |
"{0EAE1214-75B7-4D00-8178-01CE935D2CC2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\runme.exe |
"{0F79B714-C48D-4EA5-A942-D9824FAC8195}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{0FED3426-3884-4624-8645-41BD4CF5CEE0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{109C06A1-2DC0-4DB8-B2DE-F1E222EBCB7E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\runme.exe |
"{114BA6A6-B336-4CE9-86E9-F4BB6BCFF9D0}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{127B36BC-93E6-4551-8F6B-A54C23EC8669}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{155F3605-B9CF-40D1-AEB0-168FE97C622B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\crayon physics deluxe\launcher.exe |
"{1611F13B-3E78-47BA-A34B-82019C99BADC}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe |
"{16C5EC3A-B09A-4164-BAA0-0304A1729131}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_launcher.exe |
"{190D1A17-BEEA-4E13-A571-77E6B6C77EBB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 4\tropico4.exe |
"{1970D576-E4D1-42DD-B782-4BA16DEAEFAD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{19E5C625-0428-4FE8-BD3F-D41C9865E89C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\anno 2070\anno5.exe |
"{1ACA198B-19F7-49F4-AB3D-408DB2730D7A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\solar 2\solar2.exe |
"{1AF8A9B4-1345-4927-B798-DA31349673CE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |
"{1BE13586-6CA0-4B54-A07D-20962DBB943F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |
"{1C3456CE-B208-496B-8A0B-16AFE1534759}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\super hexagon\superhexagon.exe |
"{23A0DD95-53F0-4107-86F8-972BC4A70415}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{250F230B-2AB6-4D91-915F-89960C3BFFA9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{2B8B09DA-5CE0-4DDB-8B52-CA085B16B6C5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{2CC740AD-CE87-4A70-BA23-3667426C8EAA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{35371EC7-FC6D-4BF1-841E-CA6B557E5F36}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dynamite jack\dynamite jack.exe |
"{353F802C-CFF0-479E-BD2E-A39F019E3474}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3883C711-769F-4BE1-BA8F-100E7A5D6A72}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{38D746A2-EDBA-4135-AA3F-F02EF1084C95}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{3B267EBF-7634-4599-9053-5F763E96FE1C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\thepyramid\source sdk base 2007\hl2.exe |
"{403B0508-9C83-42EB-9063-22CBB7F0310B}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{41185329-0067-4FB1-AB38-01A8224B2A9B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shadow warrior original\bin\dosbox.exe |
"{4158C9FC-02C5-4791-88DB-CE37E9857BDB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shadow warrior original\bin\dosbox.exe |
"{48710F35-4382-4DFB-B3CA-469FC5DE0F0B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\nightsky\nightsky.exe |
"{48CFA524-32E8-4A17-9E2D-63295847677A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{4AA484D7-A79E-4F64-B3AA-7F3E8BAE122D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{4D00F2AF-5541-4A9D-91CD-D206A441777D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\solar 2\solar2.exe |
"{4DFD8FFA-8400-4D68-B7AE-C9F9F40941E7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\anno 2070\anno5.exe |
"{4EC689B4-5CE9-4E15-BCC7-0668A17CDA02}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shadow warrior original\bin\launcher.exe |
"{4F343032-5D9F-459D-AB1B-5EA63E792F88}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{4F407AEC-6FDC-4288-8A07-17C86C62ED67}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tower wars\tw.exe |
"{52160AFF-BDD2-42EA-90AF-79CE8CB0A5DC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5389A092-51C7-4CC3-9B03-ABF3FFCAD366}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tropico 4\tropico4.exe |
"{53980F96-1A79-4822-A3B4-51F32917D32B}" = protocol=17 | dir=in | app=c:\users\emil\appdata\roaming\bittorrent\bittorrent.exe |
"{557FCE3C-5A92-4330-A032-189AC5399915}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tower wars\tw.exe |
"{68580AA7-2668-455D-93C4-3483287855AB}" = dir=in | app=c:\program files\intel corporation\intel widi\widiapp.exe |
"{696D5B6E-27D3-49ED-94A9-3597E19D2054}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ftl faster than light\ftlgame.exe |
"{71688AE9-5589-4A36-ABA8-A7A059B7289A}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1737\agent.exe |
"{732B9CF2-3891-4E52-AFEE-CF711B85CA11}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7600B8EB-9064-454A-8560-2911950C556B}" = protocol=6 | dir=out | app=system |
"{78200FCB-FEB5-4AEB-987B-D6682C6581DC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1637\agent.exe |
"{7D638BBD-B57B-4358-95D5-458A37E1E449}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\splice\splice.exe |
"{88F77C26-2FBC-4A5B-B031-7D6D07FC64D6}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\zenoclash\zenoclash.exe |
"{8BB3570E-2338-4871-BE0E-C15F0FD32F2A}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\capsized\capsized.exe |
"{8EA30B20-8806-47B6-9E90-3D37F3503085}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"{90F613AF-D2CE-4EF5-9738-67F733EB0E2E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\darksiders\darksiderspc.exe |
"{9D2885A8-A5E4-401E-89FA-3C3C1B58ED50}" = protocol=1 | dir=out | [email protected],-28544 |
"{9FFBEBE6-54D7-4ECD-A65E-DD43573A8148}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{A0DF371C-CA54-42E3-A7C4-B7F8BFEF163B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{A18F539D-78D2-4ADA-AC20-F99B7EA30FB4}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"{A6D8D7AE-7DEB-4EDD-932F-F15E1AA1CB6B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{A711E090-BD25-4CDD-9705-74D7B32B5756}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dynamite jack\dynamite jack.exe |
"{A898E919-DC99-4387-925F-B279A37B460E}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\splice\splice.exe |
"{AE0D47F2-577E-4AA3-B3D1-A06ADB7DBCAB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{AFF89E72-5C7F-4E1D-9E4E-94384E2C870E}" = protocol=17 | dir=in | app=c:\program files (x86)\starcraft ii\starcraft ii public test.exe |
"{AFFE404D-C720-4F84-BC96-826B9527F09E}" = protocol=17 | dir=in | app=c:\program files (x86)\starcraft ii\starcraft ii.exe |
"{B00DED62-F79B-49DD-80CB-7BD0B51B8C5E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\zenoclash\zenoclash.exe |
"{B1AA578E-9559-4ADC-A591-69B7293B631D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe |
"{B54EAA67-600D-4564-A017-4DD3EF61B3BD}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{B6DBDAEC-6F06-42A1-BFB9-F4D8F192E5DC}" = dir=in | app=c:\program files\intel\wifi\bin\pandhcpdns.exe |
"{B86EAD9F-23E3-4E70-BA3C-1C45D3F31E30}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tower wars\tw.exe |
"{BA37D30D-5A93-4078-8500-134925BE1271}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\super hexagon\superhexagon.exe |
"{BB4A5892-A45E-4279-A35E-028117276047}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe |
"{BECA5E2D-CEAE-4349-B745-6D495682F67E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\thepyramid\source sdk base 2007\hl2.exe |
"{C08E40DC-9B01-446D-A52C-123DBB32C932}" = protocol=58 | dir=in | [email protected],-28545 |
"{C0A5F6AA-2C04-4B09-86A5-D7D075FD7CF3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\darksiders\darksiderspc.exe |
"{C27564FC-DEFF-44BD-A50F-C4D4DD5B27A8}" = protocol=6 | dir=in | app=c:\program files (x86)\starcraft ii\starcraft ii.exe |
"{C3FE89B4-7759-4952-A6C6-F3427F1FF8B0}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{C4398005-F85D-40E1-A022-18C5A9D1E222}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{CD5351B6-5E7F-422A-8999-0AE19259D780}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{CDD83706-BAA3-458C-B097-BEE06587911C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1544\agent.exe |
"{CEA8919D-9258-49EC-A918-577BE2870CE7}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |
"{CF04BCC1-87A0-4C3C-B383-11656B506FD0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\shadow warrior original\bin\launcher.exe |
"{D36AE329-F023-4F7C-A212-D2A78741C4AB}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{D6797094-94F1-4E44-BBDC-58B9F736D6D8}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{D77235D2-19AF-469A-8AB1-A452B10E1B5F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\crayon physics deluxe\launcher.exe |
"{DD457B4A-2FDC-4952-8797-E8E363B27217}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E0ECC651-607D-4E0F-AB58-55EFEE3549B2}" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{E18F4A93-46FD-4A4C-98B8-0C1DCA0561B4}" = protocol=1 | dir=in | [email protected],-28543 |
"{E27410EB-7F08-449C-BCCE-A49D3F569239}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe |
"{E3F87EA8-2391-47C4-8A4F-1A9031C71D4C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_launcher.exe |
"{E6662777-DE35-4C3C-B7F4-613B43510A53}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{E675FFAA-2BDE-4EFA-9801-BE58E35C6E4B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\capsized\capsized.exe |
"{E85FDBAA-2EDB-4009-9E1A-A51D21C1949C}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\tower wars\tw.exe |
"{E9C2520A-D7F8-48E4-9798-C190B2173A9D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2006\agent.exe |
"{EA98C301-C8A5-4BBA-841A-2312477164DE}" = protocol=6 | dir=in | app=c:\program files (x86)\starcraft ii\starcraft ii public test.exe |
"{EE4DC858-3E67-481F-B277-C3D6B94CC044}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum2\binaries\win32\sanctumgame-win32-shipping.exe |
"{F0860B88-DDD2-40B8-BBA5-7DA659D12132}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2045\agent.exe |
"{F2AA0503-01B0-43FC-8C5E-0647AFE97644}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sanctum2\binaries\win32\sanctumgame-win32-shipping.exe |
"{F862363B-83BF-4590-B871-ABDA91914A12}" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"{F86F2091-D9F8-4F89-A633-0CE707A55E1A}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{00E3DB5B-B971-4265-8A72-89FD631056A9}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"TCP Query User{0A50A885-0381-42A7-8857-13316F20CF50}C:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe |
"TCP Query User{17B3157D-44C8-43A8-91DB-D0735EC344D4}C:\users\emil\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\emil\appdata\roaming\spotify\spotify.exe |
"TCP Query User{1A722920-4F35-458B-897E-E4B028EE399F}C:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"TCP Query User{28F0AC3F-195B-410B-8EA1-3120983B1D7B}C:\users\emil\downloads\downloader_warcraft3_reign_of_chaos_engb.exe" = protocol=6 | dir=in | app=c:\users\emil\downloads\downloader_warcraft3_reign_of_chaos_engb.exe |
"TCP Query User{39830DF6-A4EE-4614-87E0-5CD15315DE11}C:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe |
"TCP Query User{4F05724B-2417-4E35-9F08-16EB9CFD5F07}C:\users\emil\downloads\downloader_warcraft3_the_frozen_throne_engb.exe" = protocol=6 | dir=in | app=c:\users\emil\downloads\downloader_warcraft3_the_frozen_throne_engb.exe |
"TCP Query User{63376DF5-B2E9-4120-8CEC-0E84393C79FA}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe |
"TCP Query User{7CC75BDB-CE2D-479A-8201-AEF2BBE57865}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base26490\sc2.exe |
"TCP Query User{7D779E2C-71CE-47C3-B6D7-2C8CAFFCA555}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base24944\sc2.exe |
"TCP Query User{83BBA3AF-3FD1-4481-B829-3464F726B94A}C:\users\emil\downloads\bittorrent.exe" = protocol=6 | dir=in | app=c:\users\emil\downloads\bittorrent.exe |
"TCP Query User{8D10F8E5-23D1-4975-A848-D132BF86A563}C:\users\emil\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\emil\appdata\roaming\spotify\spotify.exe |
"TCP Query User{B3267959-7E1C-4779-8B6F-CFEE6D838F1C}C:\programdata\battle.net\agent\agent.1675\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"TCP Query User{C687D436-F51C-4890-ADB7-23A4E82B3EF1}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe |
"TCP Query User{CB89D879-CCE8-4F61-A9DE-826B08813908}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{CCA77AE8-6AFE-4F88-BC44-C605A9A3E77C}C:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe" = protocol=6 | dir=in | app=c:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe |
"TCP Query User{CFAE0A4E-E864-4000-9F8B-53FACA1B3B61}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{F8034EAF-557E-4AD3-A965-480F8E150C08}C:\program files (x86)\steam\steamapps\common\trine 2\trine2_32bit.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_32bit.exe |
"TCP Query User{FA92FA2C-7331-417F-9D02-E0924EC42EF2}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe |
"TCP Query User{FCF8B1A3-B5D0-497F-82AA-9BFDED87394A}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base24944\sc2.exe |
"UDP Query User{0937C166-2838-42D8-B6DC-F69E7BA676AE}C:\program files (x86)\starcraft ii\versions\base26490\sc2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base26490\sc2.exe |
"UDP Query User{0EC22664-A061-406A-9ABE-D60587991A3E}C:\users\emil\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\emil\appdata\roaming\spotify\spotify.exe |
"UDP Query User{18877C8F-8C65-4917-AC46-3C9A9B2B215D}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base24944\sc2.exe |
"UDP Query User{1B4CDDE0-37C9-4100-8155-1D8BFA0B473E}C:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"UDP Query User{2136FCE1-C8D5-4317-9D64-9954FEF1E946}C:\users\emil\downloads\bittorrent.exe" = protocol=17 | dir=in | app=c:\users\emil\downloads\bittorrent.exe |
"UDP Query User{2474903D-7C0B-420D-A710-5AEFFB79C8AA}C:\users\emil\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\emil\appdata\roaming\spotify\spotify.exe |
"UDP Query User{39F068E9-3975-4E81-AAA3-82EC787FDEFA}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"UDP Query User{47412394-BEBA-46F8-9B78-E933F4633A8A}C:\users\emil\downloads\downloader_warcraft3_the_frozen_throne_engb.exe" = protocol=17 | dir=in | app=c:\users\emil\downloads\downloader_warcraft3_the_frozen_throne_engb.exe |
"UDP Query User{73E9FE8D-47AB-4B05-8833-2B75D77906AB}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe |
"UDP Query User{8754547E-E4C2-4F2F-9C12-F99F75633783}C:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe |
"UDP Query User{8970B48A-9B79-4098-BDE8-836350313690}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{9EB06AB5-04A7-4C0D-8461-95B39EEC74A3}C:\programdata\battle.net\agent\agent.1675\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"UDP Query User{A9FF9251-EAE4-4D2D-8812-62DA2883BAA0}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe |
"UDP Query User{AA945259-F5CC-4F81-9540-C66DA4A48214}C:\program files (x86)\bitcoin\bitcoin-qt.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin-qt.exe |
"UDP Query User{C128A1DC-B284-4874-88A4-8466653B09D8}C:\program files (x86)\steam\steamapps\common\trine 2\trine2_32bit.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trine 2\trine2_32bit.exe |
"UDP Query User{C97D1CC0-FBD0-43C8-B92E-6A1B784C05AB}C:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\beat hazard\beathazard.exe |
"UDP Query User{D0B92C69-A104-4745-858E-20BA42C81F01}C:\program files (x86)\starcraft ii\versions\base24944\sc2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\starcraft ii\versions\base24944\sc2.exe |
"UDP Query User{D55B8AA8-9D07-475E-9214-86D246649EDE}C:\users\emil\downloads\downloader_warcraft3_reign_of_chaos_engb.exe" = protocol=17 | dir=in | app=c:\users\emil\downloads\downloader_warcraft3_reign_of_chaos_engb.exe |
"UDP Query User{DBF62096-E055-402B-805D-E97388D6E35B}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe |
"UDP Query User{F6B7A84E-75E2-4CB6-815F-010C35DC17E7}C:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe" = protocol=17 | dir=in | app=c:\program files (x86)\cryptic studios\neverwinter\live\gameclient.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0620FA40-8926-F3D1-1753-0AC4627EA2CF}" = AMD Drag and Drop Transcoding
"{09536BA1-E498-4CC3-B834-D884A67D7E34}" = Intel® Trusted Connect Service Client
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86417017FF}" = Java 7 Update 17 (64-bit)
"{28EF7372-9087-4AC3-9B9F-D9751FCDF830}" = Intel® Wireless Display
"{2AE2789B-454A-0A8D-D848-38F1F7070C73}" = AMD Catalyst Install Manager
"{37EC048A-81A2-452A-8D1F-3BE2018E767D}" = Intel® PROSet/Wireless for Bluetooth® + High Speed
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{728985C5-A04B-457C-9D62-15360F3EAF85}" = Intel® WiDi
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{B9CC9724-F5C2-74FE-9DB8-680D76AFDE90}" = AMD Media Foundation Decoders
"{BE34AF27-9846-A21A-DE63-78B8F9528C98}" = AMD Accelerated Video Transcoding
"{C06A46F2-6DBB-222E-2E5F-28AF5FEBB408}" = ccc-utility64
"{E97F409F-9E1C-42A0-B72D-765A78DF3696}" = Intel® PROSet/Wireless WiFi-programvare
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Blender" = Blender
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.4
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.20 (64-bit)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{150C24B4-EE45-F2D2-E6F5-45AA2BCB627D}" = CCC Help Thai
"{164714B6-46BC-4649-9A30-A6ED32F03B5A}" = Hotkey 6.0045
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22000360-7B5D-0C62-6B06-8B2F28134ACE}" = CCC Help Czech
"{240C3DDD-C5E9-4029-9DF7-95650D040CF2}" = Intel® USB 3.0 eXtensible Host Controller Driver
"{26A24AE4-039D-4CA4-87B4-2F83216043FF}" = Java™ 6 Update 43
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{284312D5-D9CA-4E37-1454-AEAF13CEB11E}" = CCC Help English
"{2952F872-9045-4668-E5AA-97EF74ACB397}" = CCC Help Portuguese
"{2A14D7BC-1876-4B38-830B-18856C27F550}" = WebCam Installer
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{31F0FBA4-C636-BFD8-450D-10BD6EEF51B2}" = CCC Help Italian
"{32A3A4F4-B792-11D6-A78A-00B0D0160430}" = Java™ SE Development Kit 6 Update 43
"{3783120C-0538-0DE6-A9FC-5D2F3B427D9B}" = CCC Help Danish
"{38136734-7051-347E-59C7-FF6CB35543ED}" = Catalyst Control Center InstallProxy
"{3B4A813C-3A3F-5C7E-944B-B474600C47E1}" = CCC Help Hungarian
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{427BEE59-2128-B9DA-09C8-85C7101A1A30}" = CCC Help Swedish
"{472E3E07-A88F-50F1-0ACE-061019518221}" = CCC Help Greek
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4C32A907-5888-3600-4A10-4EA1F572A248}" = CCC Help Polish
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.5
"{4EDB7A50-A618-EE03-2BBD-9260F6BD53B3}" = CCC Help Korean
"{5488B43B-DCE3-2F2B-B5D1-D743DF81F5F4}" = Catalyst Control Center
"{5BBC4803-C96E-4D3E-9D1D-2E43774C4062}" = BisonCam
"{5EF3F0D6-9F51-4759-8934-E43C1373D1A2}" = OpenOffice.org 3.4.1
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{6B9AFA2A-6FE2-3FE9-1EDD-B828A4005512}" = Catalyst Control Center Localization All
"{6E8A5B2D-AF7A-5929-B258-7DD4BA329A99}" = CCC Help Chinese Standard
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{718B4606-2FEF-411B-B96E-4FC53B91EBC0}" = Secure Download Manager
"{731754A6-C8C1-3815-16B1-4AEE315763BC}" = CCC Help Spanish
"{79361740-EAE3-11E2-9911-B8AC6F98CCE3}" = Google Earth Plug-in
"{7CFD4120-ACC8-9E69-6455-D833E3300427}" = CCC Help Finnish
"{82F99DC9-389A-4528-940C-88248731A620}" = THX TruStudio Pro
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends
"{95A4A257-E4E7-B08E-289F-4E111C86A532}" = CCC Help French
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D5F1FBA-8A22-7924-6445-66EC0E832EBF}" = PX Profile Update
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1044-7B44-AB0000000001}" = Adobe Reader XI (11.0.02) - Norsk
"{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}" = DarksidersInstaller
"{BDEC16AE-0797-465E-94FF-100B33A1019B}" = CCC Help Russian
"{C046A0FC-5C89-05B9-9EF0-44FDFA736998}" = CCC Help Turkish
"{C1594429-8296-4652-BF54-9DBE4932A44C}" = Realtek PCIE Card Reader
"{C7059208-9425-0FCA-8E93-27050ED05E85}" = CCC Help Norwegian
"{D51D52CF-B774-B8FD-DBB2-BAB64EC25F2B}" = CCC Help Dutch
"{D7FCE7AE-C041-5DEF-5330-FBC5A61403DB}" = CCC Help Japanese
"{D82CC1D8-E175-C17F-B73D-F38E46DE6FC3}" = CCC Help Chinese Traditional
"{E362724E-9320-4946-AF34-874E7B6B2927}" = System Requirements Lab CYRI
"{E72F1051-B87E-4EF4-AE9F-8FDD229CC438}" = Catalyst Control Center - Branding
"{E880E5E6-E5D5-5159-E957-433047FB62ED}" = Catalyst Control Center Graphics Previews Common
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Display Audio Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3623897-58EF-AE82-4C2C-F4E5A3A72FEC}" = CCC Help German
"{FAB9454C-6A8D-4031-9652-8B1B1D561456}" = System Requirements Lab
"ASIO4ALL" = ASIO4ALL
"Audacity_is1" = Audacity 2.0.3
"BioShock Infinite_is1" = BioShock Infinite
"BitTorrent" = BitTorrent
"DAEMON Tools Lite" = DAEMON Tools Lite
"FL Studio 10" = FL Studio 10
"Google Chrome" = Google Chrome
"IL Download Manager" = IL Download Manager
"InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}" = Hotkey 6.0045
"InstallShield_{2A14D7BC-1876-4B38-830B-18856C27F550}" = WebCam Installer
"Mozilla Firefox 23.0 (x86 en-US)" = Mozilla Firefox 23.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"nbi-nb-base-7.3.0.0.201302132200" = NetBeans IDE 7.3
"Neverwinter" = Neverwinter
"Open Broadcaster Software" = Open Broadcaster Software
"Perspective" = Perspective 1.0
"R2FtZURldlR5Y29vbnYxMzI=_is1" = Game Dev Tycoon v1.3.2 © Greenheart Games version 1
"RaidCall" = RaidCall
"StarCraft II" = StarCraft II
"Steam App 105600" = Terraria
"Steam App 202730" = Dynamite Jack
"Steam App 204300" = Awesomenauts
"Steam App 209790" = Splice
"Steam App 210770" = Sanctum 2
"Steam App 212680" = FTL: Faster Than Light
"Steam App 214360" = Tower Wars
"Steam App 218" = Source SDK Base 2007
"Steam App 220780" = Thomas Was Alone
"Steam App 221640" = Super Hexagon
"Steam App 22200" = Zeno Clash
"Steam App 238070" = Shadow Warrior Classic (1997)
"Steam App 26900" = Crayon Physics Deluxe
"Steam App 35720" = Trine 2
"Steam App 48240" = Anno 2070
"Steam App 49600" = Beat Hazard
"Steam App 50620" = Darksiders
"Steam App 570" = Dota 2
"Steam App 57690" = Tropico 4
"Steam App 65800" = Dungeon Defenders
"Steam App 91600" = Sanctum
"Steam App 95300" = Capsized
"Steam App 97000" = Solar 2
"Steam App 99700" = NightSky
"The Mighty Quest For Epic Loot_is1" = The Mighty Quest For Epic Loot version 1.211477
"Torchlight_is1" = Torchlight
"VLC media player" = VLC media player 2.0.5
"Void" = Void 1.0
"Warcraft III" = Warcraft III
"World of Warcraft" = World of Warcraft

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Bitcoin" = Bitcoin
"Spotify" = Spotify

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 12.08.2013 17:12:23 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: firefox.exe, version: 23.0.0.4959, time
stamp: 0x51f84049 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time
stamp: 0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process
id: 0x4e4 Faulting application start time: 0x01ce97a0a0662919 Faulting application
path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: e1239086-0393-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:12:35 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: firefox.exe, version: 23.0.0.4959, time
stamp: 0x51f84049 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time
stamp: 0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process
id: 0x340 Faulting application start time: 0x01ce97a0a7cea846 Faulting application
path: C:\Program Files (x86)\Mozilla Firefox\firefox.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: e8940472-0393-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:16:57 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16496,
time stamp: 0x51a55c6d Faulting module name: ntdll.dll, version: 6.1.7601.17725,
time stamp: 0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting
process id: 0x11f8 Faulting application start time: 0x01ce97a0ecb95827 Faulting application
path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path:
C:\Windows\SysWOW64\ntdll.dll Report Id: 845acf99-0394-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:17:31 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16496,
time stamp: 0x51a55c6d Faulting module name: ntdll.dll, version: 6.1.7601.17725,
time stamp: 0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting
process id: 0x958 Faulting application start time: 0x01ce97a14bf65254 Faulting application
path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path:
C:\Windows\SysWOW64\ntdll.dll Report Id: 98eb20bc-0394-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:17:57 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: iexplore.exe, version: 9.0.8112.16496,
time stamp: 0x51a55c6d Faulting module name: ntdll.dll, version: 6.1.7601.17725,
time stamp: 0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting
process id: 0x176c Faulting application start time: 0x01ce97a15da4b8e3 Faulting application
path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Faulting module path:
C:\Windows\SysWOW64\ntdll.dll Report Id: a869c242-0394-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:21:41 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.84.85.72, time stamp:
0x51f2e856 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp:
0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process id:
0x1334 Faulting application start time: 0x01ce97a1ed028584 Faulting application path:
C:\Program Files (x86)\Steam\Steam.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: 2da21497-0395-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:29:31 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.84.85.72, time stamp:
0x51f2e856 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp:
0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process id:
0x5ec Faulting application start time: 0x01ce97a305b460e9 Faulting application path:
C:\Program Files (x86)\Steam\Steam.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: 45c4d480-0396-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:29:40 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.84.85.72, time stamp:
0x51f2e856 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp:
0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process id:
0x80c Faulting application start time: 0x01ce97a30b9034ac Faulting application path:
C:\Program Files (x86)\Steam\Steam.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: 4b6eafc2-0396-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:31:55 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.84.85.72, time stamp:
0x51f2e856 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp:
0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process id:
0x172c Faulting application start time: 0x01ce97a35ae62cce Faulting application path:
C:\Program Files (x86)\Steam\Steam.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: 9b97b97d-0396-11e3-8a56-0090f5d5e03d

Error - 12.08.2013 17:34:10 | Computer Name = Emil-PC | Source = Application Error | ID = 1000
Description = Faulting application name: Steam.exe, version: 1.84.85.72, time stamp:
0x51f2e856 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp:
0x4ec49b8f Exception code: 0xc0000374 Fault offset: 0x000ce6c3 Faulting process id:
0x8f8 Faulting application start time: 0x01ce97a3ac9f28ff Faulting application path:
C:\Program Files (x86)\Steam\Steam.exe Faulting module path: C:\Windows\SysWOW64\ntdll.dll
Report
Id: ec8b82c6-0396-11e3-8a56-0090f5d5e03d

[ System Events ]
Error - 30.07.2013 06:54:50 | Computer Name = Emil-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 12:52:56 on ?30.?07.?2013 was unexpected.

Error - 30.07.2013 06:56:45 | Computer Name = Emil-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the Steam
Client Service service to connect.

Error - 30.07.2013 06:56:45 | Computer Name = Emil-PC | Source = Service Control Manager | ID = 7000
Description = The Steam Client Service service failed to start due to the following
error: %%1053

Error - 30.07.2013 07:40:39 | Computer Name = Emil-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 13:38:59 on ?30.?07.?2013 was unexpected.

Error - 01.08.2013 01:16:53 | Computer Name = Emil-PC | Source = Disk | ID = 262155
Description = The driver detected a controller error on \Device\Harddisk1\DR2.

Error - 03.08.2013 09:35:19 | Computer Name = Emil-PC | Source = DCOM | ID = 10010
Description =

Error - 04.08.2013 16:07:21 | Computer Name = Emil-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 22:05:39 on ?04.?08.?2013 was unexpected.

Error - 05.08.2013 09:44:41 | Computer Name = Emil-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 06:19:14 on ?05.?08.?2013 was unexpected.

Error - 08.08.2013 09:12:29 | Computer Name = Emil-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 05:49:06 on ?08.?08.?2013 was unexpected.

Error - 11.08.2013 14:04:20 | Computer Name = Emil-PC | Source = DCOM | ID = 10010
Description =


< End of report >




Thanks in advance.

Edited by nochiro, 12 August 2013 - 03:51 PM.

  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP