[Micaso]

Hello DonnaB,

I ran Revo Uninstaller and I think I managed to uninstall Java 6 Update 26. The built-in uninstaller failed to work, like before, because of a DLL missing error, but I deleted all folders and registry entries Revo found.

Micaso

[Advertisements]

Hi there Micaso,

I think I managed to uninstall Java 6 Update 26

I'm going to have you provide one more set of OTL/Extras.txt logs to verify that it has been removed completely. And before I send you on your way, I'd also like you to run an Online scan with ESET Online Scanner. Please do the following in the order listed:

For the OTL/Extras.txt logs:

• Double click on to open the program. On Vista/Win7/Win8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
• Click the Scan All Users checkbox
  and
• Check the option for All under the Extra Registry section
• Click Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  
  • OTL.txt <-- Will be opened, maximized
  • Extras.txt <-- Will be minimized on task bar.
• Please post the contents of both OTL.txt and Extras.txt files in your next reply.

And for the Eset Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

• Please go >>HERE<< then click on:
  
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the icon to install.
  
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  
• Scan for potentially unwanted applications
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology

• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
• Copy and paste that log as a reply to this topic.
• Now click on:
  (Selecting Uninstall application on close if you so wish)

Please post the following logs in your next reply:

OTL.txt
Extras.txt
C:\Program Files\ESET\EsetOnlineScanner\log.txt

Thank you,
Donna

[DonnaB]

Hi there Micaso,

I think I managed to uninstall Java 6 Update 26

I'm going to have you provide one more set of OTL/Extras.txt logs to verify that it has been removed completely. And before I send you on your way, I'd also like you to run an Online scan with ESET Online Scanner. Please do the following in the order listed:

For the OTL/Extras.txt logs:

• Double click on to open the program. On Vista/Win7/Win8 right click select Run As Administrator to start the program. If prompted by UAC, please allow it.
• Click the Scan All Users checkbox
  and
• Check the option for All under the Extra Registry section
• Click Run Scan at the top left hand corner.
• When done, two Notepad files will open.
  
  • OTL.txt <-- Will be opened, maximized
  • Extras.txt <-- Will be minimized on task bar.
• Please post the contents of both OTL.txt and Extras.txt files in your next reply.

And for the Eset Online Scanner

Note: You can use either Internet Explorer or Mozilla FireFox for this scan. You will however need to disable your current installed Anti-Virus, how to do so can be read here.

• Please go >>HERE<< then click on:
  
  Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on the icon to install.
  
  All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:
  
• Scan for potentially unwanted applications
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology

• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed make sure you first copy the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt
• Copy and paste that log as a reply to this topic.
• Now click on:
  (Selecting Uninstall application on close if you so wish)

Please post the following logs in your next reply:

OTL.txt
Extras.txt
C:\Program Files\ESET\EsetOnlineScanner\log.txt

Thank you,
Donna

[DonnaB]

Hi Micaso,

You still with me? It's been 4 days since my last request. Thought I'd better check in case you didn't receive an email notification.

Donna

[Micaso]

Hey DonnaB,

I'm really sorry about the delay, I've been really busy the last couple of days. I had left ESET on all night because it was taking long, but apparently it the log didn't save correctly or something. I'm gonna leave it running again tonight. Here's the OTL logs, though. I'll post the ESET log first thing in the morning.

OTL Log

OTL logfile created on: 10/16/2013 2:29:17 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Usuario\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

8.00 Gb Total Physical Memory | 5.87 Gb Available Physical Memory | 73.42% Memory free
15.99 Gb Paging File | 12.04 Gb Available in Paging File | 75.26% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 255.72 Gb Free Space | 27.45% Space Free | Partition Type: NTFS

Computer Name: USUARIO-PC | User Name: Usuario | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/10/08 23:19:14 | 000,565,672 | ---- | M] (Valve Corporation) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe
PRC - [2013/10/08 23:19:12 | 001,813,928 | ---- | M] (Valve Corporation) -- C:\Nico\Tools\Steam\Steam.exe
PRC - [2013/10/03 03:03:07 | 000,844,752 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
PRC - [2013/09/19 23:12:47 | 000,189,248 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe
PRC - [2013/09/09 17:39:26 | 000,076,888 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2013/06/05 01:01:52 | 004,489,472 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Usuario\AppData\Local\Akamai\netsession_win.exe
PRC - [2013/05/11 07:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/26 19:05:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Usuario\Desktop\OTL.exe
PRC - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Nico\Tools\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 14:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Nico\Tools\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Nico\Tools\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2012/04/04 06:25:00 | 000,295,584 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
PRC - [2009/11/20 08:17:54 | 000,106,496 | ---- | M] (NEC Electronics Corporation) -- C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
PRC - [2009/10/15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
PRC - [2009/10/15 14:06:42 | 000,375,000 | ---- | M] (DeviceVM, Inc.) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
PRC - [2009/08/29 03:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Usuario\Local Settings\Apps\F.lux\flux.exe
PRC - [2009/08/24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe


========== Modules (No Company Name) ==========

MOD - [2013/10/14 18:31:45 | 013,584,776 | ---- | M] () -- C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\PepperFlash\11.9.900.117\pepflashplayer.dll
MOD - [2013/10/08 23:19:16 | 001,121,704 | ---- | M] () -- C:\Nico\Tools\Steam\bin\chromehtml.dll
MOD - [2013/10/03 03:03:05 | 000,415,184 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppgooglenaclpluginchrome.dll
MOD - [2013/10/03 03:03:03 | 004,055,504 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
MOD - [2013/10/03 03:02:12 | 000,698,832 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libglesv2.dll
MOD - [2013/10/03 03:02:11 | 000,099,792 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\libegl.dll
MOD - [2013/10/03 03:02:09 | 001,604,560 | ---- | M] () -- C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ffmpegsumo.dll
MOD - [2013/09/10 19:20:56 | 020,625,832 | ---- | M] () -- C:\Nico\Tools\Steam\bin\libcef.dll
MOD - [2013/08/21 19:18:28 | 000,687,104 | ---- | M] () -- C:\Nico\Tools\Steam\SDL2.dll
MOD - [2013/06/14 20:49:12 | 001,100,800 | ---- | M] () -- C:\Nico\Tools\Steam\bin\avcodec-53.dll
MOD - [2013/06/14 20:49:12 | 000,192,000 | ---- | M] () -- C:\Nico\Tools\Steam\bin\avformat-53.dll
MOD - [2013/06/14 20:49:12 | 000,124,416 | ---- | M] () -- C:\Nico\Tools\Steam\bin\avutil-51.dll
MOD - [2013/04/04 01:09:40 | 004,300,456 | ---- | M] () -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2012/08/27 21:33:32 | 000,087,912 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/08/27 21:33:08 | 001,242,512 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010/10/20 15:45:26 | 008,801,120 | ---- | M] () -- C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll
MOD - [2009/08/29 03:00:12 | 000,966,656 | ---- | M] () -- C:\Users\Usuario\Local Settings\Apps\F.lux\flux.exe
MOD - [2009/06/27 10:11:12 | 000,503,202 | ---- | M] () -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll


========== Services (SafeList) ==========

SRV:64bit: - [2013/06/20 20:33:08 | 000,366,600 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2013/06/20 20:33:08 | 000,023,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2013/05/27 02:50:47 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2013/03/28 22:34:18 | 000,241,152 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2013/03/28 22:30:42 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2010/04/06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV:64bit: - [2009/07/13 22:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2013/10/08 23:19:14 | 000,565,672 | ---- | M] (Valve Corporation) [On_Demand | Running] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013/10/08 15:28:31 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/10/01 15:51:14 | 002,746,704 | ---- | M] (LogMeIn Inc.) [Auto | Stopped] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013/09/19 23:12:47 | 000,189,248 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB)
SRV - [2013/09/09 17:39:26 | 000,076,888 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2013/09/05 10:34:30 | 000,171,680 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2013/05/11 07:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 14:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Nico\Tools\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Nico\Tools\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2012/08/02 11:56:54 | 001,095,824 | ---- | M] (Corel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\Game1X\SharedCOM\RoxMediaDBGame1X.exe -- (RoxMediaDBGame1X)
SRV - [2011/05/03 18:10:00 | 004,116,984 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/02/19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/10/15 14:06:46 | 000,223,464 | ---- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe -- (BCUService)
SRV - [2009/09/23 21:59:36 | 001,037,824 | ---- | M] (Hewlett-Packard Co.) [Auto | Running] -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL -- (HPSLPSVC)
SRV - [2009/08/24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe -- (ES lite Service)
SRV - [2009/07/13 01:08:04 | 000,024,168 | ---- | M] (The Within Network, LLC) [Auto | Running] -- C:\Windows\UnsignedThemesSvc.exe -- (UnsignedThemes)
SRV - [2009/06/10 18:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2013/06/18 21:50:08 | 000,139,616 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2013/05/21 14:15:26 | 000,283,200 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV:64bit: - [2013/04/15 06:50:30 | 000,127,384 | ---- | M] (Power Software Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\scdemu.sys -- (SCDEmu)
DRV:64bit: - [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2013/03/28 23:35:02 | 011,658,752 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2013/03/28 22:09:44 | 000,581,120 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2013/02/14 08:41:10 | 000,096,768 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2013/01/25 16:38:04 | 000,088,448 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2012/12/19 14:47:20 | 000,132,008 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2012/12/13 13:50:36 | 000,054,784 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64)
DRV:64bit: - [2012/11/29 11:56:50 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2012/11/29 11:56:30 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2012/08/21 13:01:20 | 000,033,240 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)
DRV:64bit: - [2012/08/02 11:18:08 | 000,101,632 | ---- | M] (UT) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\uth5x64.sys -- (H5xUSB)
DRV:64bit: - [2012/07/10 03:01:00 | 000,056,336 | ---- | M] (Corel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2012/06/05 02:45:16 | 000,237,968 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2012/04/09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.01)
DRV:64bit: - [2012/03/01 03:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/11/22 20:40:52 | 000,022,408 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV:64bit: - [2011/11/22 20:40:52 | 000,016,008 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LGVirHid.sys -- (LGVirHid)
DRV:64bit: - [2011/09/21 10:25:54 | 000,021,992 | ---- | M] (CPUID) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\cpuz135_x64.sys -- (cpuz135)
DRV:64bit: - [2011/08/07 12:43:20 | 000,230,352 | ---- | M] (TrueCrypt Foundation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\truecrypt.sys -- (truecrypt)
DRV:64bit: - [2011/05/24 20:40:10 | 000,037,888 | ---- | M] (AnchorFree Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\taphss.sys -- (taphss)
DRV:64bit: - [2011/03/18 17:20:22 | 000,410,184 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfBakerCamd64.sys -- (LADF_BakerCOnly)
DRV:64bit: - [2011/03/18 14:33:48 | 000,335,688 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ladfBakerRamd64.sys -- (LADF_BakerROnly)
DRV:64bit: - [2011/03/11 03:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011/03/11 03:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2010/12/07 14:23:02 | 000,034,304 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandmodem64.sys -- (ANDModem)
DRV:64bit: - [2010/12/07 14:23:00 | 000,027,648 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lganddiag64.sys -- (AndDiag)
DRV:64bit: - [2010/12/07 14:23:00 | 000,027,136 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandgps64.sys -- (AndGps)
DRV:64bit: - [2010/12/07 14:22:58 | 000,019,456 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandbus64.sys -- (Andbus)
DRV:64bit: - [2010/11/20 10:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010/11/20 08:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010/11/20 08:03:42 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2010/08/02 16:19:10 | 000,031,744 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lgandadb.sys -- (androidusb)
DRV:64bit: - [2010/04/27 11:56:38 | 000,021,544 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2010/03/22 06:57:20 | 000,347,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2010/02/18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009/12/30 11:21:26 | 000,031,800 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\revoflt.sys -- (Revoflt)
DRV:64bit: - [2009/11/20 08:16:02 | 000,177,152 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2009/11/20 08:15:58 | 000,075,776 | ---- | M] (NEC Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2009/07/13 22:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/13 22:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/13 22:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/07/13 22:39:46 | 000,027,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\svchost.exe -- (1394hub)
DRV:64bit: - [2009/07/13 01:09:20 | 000,030,568 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\uxpatch.sys -- (uxpatch)
DRV:64bit: - [2009/06/10 17:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 17:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 17:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 17:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009/03/18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV:64bit: - [2007/05/14 16:06:18 | 000,027,520 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RimUsb_AMD64.sys -- (RimUsb)
DRV:64bit: - [2006/11/29 19:24:49 | 000,024,064 | ---- | M] (America Online, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\wanatw64.sys -- (wanatw)
DRV - [2013/10/15 15:43:56 | 000,025,640 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2011/12/19 15:33:05 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2011/12/17 01:32:52 | 000,025,640 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\etdrv.sys -- (etdrv)
DRV - [2010/06/25 11:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\npf.sys -- (NPF)
DRV - [2010/03/12 05:40:48 | 000,052,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys -- (AODDriver)
DRV - [2009/07/13 22:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2005/01/02 18:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://ar.msn.com/?r...AR&dcc=AR&opt=0
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 33 62 58 B2 CC BC CE 01 [binary data]
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\SearchScopes,DefaultScope = {61E5EAE4-43B0-4562-BD65-D201070F0FBC}
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE10SR
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\SearchScopes\{569D602A-DD24-45ca-BF93-92FD47A73086}: "URL" = http://www.google.co...q={searchTerms}
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\SearchScopes\{61E5EAE4-43B0-4562-BD65-D201070F0FBC}: "URL" = http://ar.search.yah...icevm&type=IEBD
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;<local>


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.10.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre1.7.0_09\bin\plugin2\npjp2.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker\bin\npFFApi.dll File not found
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.7: C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@nexon.net/NxGame: C:\ProgramData\NexonUS\NGM\npNxGameUS.dll (Nexon)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.5: C:\Nico\Tools\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@viewpoint.com/VMP: C:\Program Files (x86)\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Usuario\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\thehappycloud.com/HappyCloudPlugin: C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll (The Happy Cloud)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012/04/28 16:33:18 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/07/28 22:32:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012/08/27 22:09:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/07/28 22:32:42 | 000,000,000 | ---D | M]


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Disabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\30.0.1599.69\pdf.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.4 (Enabled) = C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: VLC Web Plugin (Enabled) = C:\Nico\Tools\VLC\npvlc.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll
CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll
CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll
CHR - plugin: Java™ Platform SE 7 U5 (Enabled) = C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: MetaStream 3 Plugin (Enabled) = C:\Program Files (x86)\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: WPI Detector 1.4 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - plugin: Happy Cloud Plugin (Enabled) = C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll
CHR - plugin: Nexon Game Controller (Disabled) = C:\ProgramData\NexonUS\NGM\npNxGameUS.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Usuario\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll
CHR - plugin: Java Deployment Toolkit 7.0.90.5 (Disabled) = C:\Windows\SysWOW64\npDeployJava1.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll
CHR - Extension: Media Hint = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.1.13_0\
CHR - Extension: YouTube = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google Search = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: XKit = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpfgeeomkfdefkckijiabdbogjkdaecd\7.2.3_0\
CHR - Extension: AdBlock = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0\
CHR - Extension: Reddit Enhancement Suite = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbmfpngjjgdllneeigpgjifpgocmfgmb\4.3.0.1_0\
CHR - Extension: Chrome In-App Payments service = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0\
CHR - Extension: Hover Zoom = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nonjdcjchghhkdoolnlbekcfllmednbl\4.21_0\
CHR - Extension: Tumblr Savior = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\oefddkjnflmjbclpnnoegglmmdfkidip\0.4.8_0\
CHR - Extension: Gmail = C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\

O1 HOSTS File: ([2013/05/10 12:48:57 | 000,000,098 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.7.0_09\bin\ssv.dll File not found
O2:64bit: - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.7.0_09\bin\jp2ssv.dll File not found
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll File not found
O3 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll File not found
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [ISUSPM] C:\ProgramData\FLEXnet\Connect\11\isuspm.exe (Flexera Software, Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000..\Run: [Akamai NetSession Interface] C:\Users\Usuario\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)
O4 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000..\Run: [DAEMON Tools Lite] C:\Nico\Tools\DAEMON Tools Lite\DTLite.exe (Disc Soft Ltd)
O4 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000..\Run: [F.lux] C:\Users\Usuario\Local Settings\Apps\F.lux\flux.exe ()
O4 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000..\Run: [ONAIR] C:\Nico\Tools\ONAIR\ONAIR.exe (DJMASTER.COM)
O4 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000..\Run: [Steam] C:\Nico\Tools\Steam\steam.exe (Valve Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8:64bit: - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8:64bit: - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html File not found
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\.DEFAULT\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\.DEFAULT\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-18\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-19\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-19\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: clonewarsadventures.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: freerealms.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: soe.com ([]* in )
O15 - HKU\S-1-5-20\..Trusted Domains: sony.com ([]* in )
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Domains: aol.com ([objects] * is out of zone range - 5)
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-601339211-1191364849-2417053759-1000\..Trusted Ranges: Range1979 ([http] in Trusted sites)
O16:64bit: - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Reg Error: Value error.)
O16:64bit: - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_26)
O16:64bit: - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset...lineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.40.2)
O16 - DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_45)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.40.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A211ED2F-02C5-4962-8E30-96622E81039C}: DhcpNameServer = 200.49.130.44 200.42.4.207
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O22:64bit: - SharedTaskScheduler: {F791A188-699D-4FD4-955A-EB59E89B1907} - Theme Resource Changer - \Program Files\Theme Resource Changer\ThemeResourceChanger.dll ()
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{86e0adb3-876a-11e1-8d66-1c6f65ae73bb}\Shell - "" = AutoRun
O33 - MountPoints2\{86e0adb3-876a-11e1-8d66-1c6f65ae73bb}\Shell\AutoRun\command - "" = E:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2013/10/13 03:33:54 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn
[2013/10/10 15:37:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2013/10/10 15:37:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2013/10/10 03:00:47 | 000,526,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/10/10 03:00:47 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/10/10 03:00:46 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/10/10 03:00:45 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/10/10 03:00:45 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/10/10 03:00:45 | 000,089,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/10/10 03:00:45 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/10/10 03:00:45 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/10/10 03:00:45 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/10/10 03:00:45 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/10/10 03:00:45 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/10/10 03:00:43 | 000,855,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/10/10 03:00:43 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/10/10 03:00:43 | 000,603,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/10/10 03:00:42 | 003,959,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/10/09 13:11:29 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2013/10/09 13:11:27 | 000,368,128 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2013/10/09 13:11:27 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2013/10/09 13:11:27 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2013/10/09 13:11:27 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2013/10/09 13:11:27 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2013/10/09 13:11:27 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpk.dll
[2013/10/09 13:11:27 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2013/10/09 13:11:27 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dciman32.dll
[2013/10/09 13:11:24 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2013/10/09 13:11:24 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidparse.sys
[2013/10/09 13:11:22 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2013/10/09 13:11:05 | 005,549,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2013/10/09 13:11:04 | 003,969,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2013/10/09 13:11:04 | 000,878,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\advapi32.dll
[2013/10/09 13:11:03 | 003,914,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2013/10/09 13:11:03 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tdh.dll
[2013/10/09 13:11:03 | 000,619,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tdh.dll
[2013/10/09 13:11:02 | 001,732,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2013/10/09 13:11:02 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2013/10/09 13:11:01 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2013/10/09 13:11:01 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2013/10/09 13:11:01 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2013/10/09 13:11:01 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2013/10/09 13:11:01 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2013/10/09 13:10:44 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 13:10:44 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2013/10/09 13:10:41 | 000,461,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2013/10/09 13:10:36 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2013/10/09 13:10:36 | 000,007,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys
[2013/10/05 22:16:50 | 000,000,000 | ---D | C] -- C:\Users\Usuario\AppData\Roaming\Oracle
[2013/10/05 22:09:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle
[2013/10/05 22:06:31 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013/10/05 22:06:23 | 000,096,168 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013/10/05 22:06:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
[2013/10/05 22:06:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
[2013/09/29 01:21:19 | 000,000,000 | ---D | C] -- C:\Users\Usuario\AppData\Roaming\Malwarebytes
[2013/09/29 01:21:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013/09/29 01:20:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013/09/29 01:20:57 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2013/09/22 00:37:06 | 000,000,000 | ---D | C] -- C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\.sol Editor
[2013/09/22 00:37:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\.sol Editor
[2013/09/22 00:37:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sol Edit
[2013/09/20 14:34:44 | 000,000,000 | ---D | C] -- C:\Users\Usuario\AppData\Local\Adobe_Systems_Incorporate
[2013/09/20 14:34:14 | 000,000,000 | ---D | C] -- C:\Users\Usuario\Documents\My Digital Editions
[2013/09/18 18:35:30 | 000,000,000 | -HSD | C] -- C:\ProgramData\DSS
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Users\Usuario\Desktop\*.tmp files -> C:\Users\Usuario\Desktop\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/10/16 14:28:00 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/10/16 13:48:16 | 000,001,038 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/10/16 13:47:21 | 000,000,202 | ---- | M] () -- C:\Windows\tasks\AutoKMSDaily.job
[2013/10/16 13:47:18 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/10/15 15:52:34 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/10/15 15:52:34 | 000,014,224 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/10/15 15:44:16 | 000,001,034 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/10/15 15:43:56 | 000,025,640 | ---- | M] (Windows ® Server 2003 DDK provider) -- C:\Windows\gdrv.sys
[2013/10/15 15:43:33 | 000,000,204 | ---- | M] () -- C:\Windows\tasks\AutoKMS.job
[2013/10/15 15:42:06 | 2145,558,527 | -HS- | M] () -- C:\hiberfil.sys
[2013/10/15 07:19:01 | 002,875,628 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2013/10/15 07:19:01 | 002,792,676 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2013/10/15 07:19:01 | 000,862,088 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2013/10/15 07:19:01 | 000,825,958 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2013/10/15 07:19:01 | 000,006,462 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2013/10/15 00:11:54 | 000,332,673 | ---- | M] () -- C:\Users\Usuario\Desktop\derp.png
[2013/10/14 20:28:57 | 000,903,193 | ---- | M] () -- C:\Users\Usuario\Desktop\Informe-General.-Nº1-año-2011.-Observatorio-de-la-Educacion-Básica-Argentina.pdf
[2013/10/14 19:15:09 | 000,798,008 | ---- | M] () -- C:\Users\Usuario\Desktop\yo.psd
[2013/10/14 19:07:12 | 000,000,132 | ---- | M] () -- C:\Users\Usuario\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2013/10/10 16:09:57 | 000,000,132 | ---- | M] () -- C:\Users\Usuario\AppData\Roaming\Adobe GIF Format CS6 Prefs
[2013/10/10 16:08:31 | 000,000,132 | ---- | M] () -- C:\Users\Usuario\AppData\Roaming\Adobe BMP Format CS6 Prefs
[2013/10/10 15:40:20 | 005,101,200 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2013/10/08 15:28:30 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2013/10/08 15:28:30 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2013/10/05 22:06:14 | 000,096,168 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2013/10/05 22:06:12 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2013/10/05 22:06:12 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2013/10/05 22:06:11 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2013/10/05 22:06:10 | 000,868,264 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll
[2013/10/05 22:06:10 | 000,790,440 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2013/10/05 16:50:20 | 000,891,167 | ---- | M] () -- C:\Users\Usuario\Desktop\SecurityCheck.exe
[2013/09/24 16:09:49 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013/09/22 20:27:49 | 000,690,688 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2013/09/22 20:27:48 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2013/09/22 20:27:48 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2013/09/22 20:27:48 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2013/09/22 20:27:48 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2013/09/22 19:55:16 | 000,051,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2013/09/22 19:54:55 | 000,603,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2013/09/22 19:54:51 | 003,959,296 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2013/09/22 19:54:51 | 000,855,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2013/09/22 19:54:50 | 000,526,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2013/09/22 19:54:50 | 000,136,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2013/09/22 19:54:50 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2013/09/22 19:54:50 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2013/09/20 23:48:36 | 000,089,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\RegisterIEPKEYs.exe
[2013/09/20 23:39:47 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\RegisterIEPKEYs.exe
[2013/09/20 14:24:39 | 000,689,144 | ---- | M] () -- C:\Users\Usuario\Desktop\Reality Is Broken - McGonigal_ Jane.epub
[2013/09/19 23:12:47 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2013/09/19 23:12:32 | 000,189,248 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Users\Usuario\Desktop\*.tmp files -> C:\Users\Usuario\Desktop\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/10/15 00:11:54 | 000,332,673 | ---- | C] () -- C:\Users\Usuario\Desktop\derp.png
[2013/10/14 20:28:56 | 000,903,193 | ---- | C] () -- C:\Users\Usuario\Desktop\Informe-General.-Nº1-año-2011.-Observatorio-de-la-Educacion-Básica-Argentina.pdf
[2013/10/14 19:14:51 | 000,798,008 | ---- | C] () -- C:\Users\Usuario\Desktop\yo.psd
[2013/10/10 16:09:01 | 000,000,132 | ---- | C] () -- C:\Users\Usuario\AppData\Roaming\Adobe GIF Format CS6 Prefs
[2013/10/10 16:08:31 | 000,000,132 | ---- | C] () -- C:\Users\Usuario\AppData\Roaming\Adobe BMP Format CS6 Prefs
[2013/10/05 16:50:28 | 000,891,167 | ---- | C] () -- C:\Users\Usuario\Desktop\SecurityCheck.exe
[2013/09/30 10:50:43 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
[2013/09/20 14:24:37 | 000,689,144 | ---- | C] () -- C:\Users\Usuario\Desktop\Reality Is Broken - McGonigal_ Jane.epub
[2013/09/19 23:12:29 | 002,601,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_moh.exe
[2013/07/22 07:49:17 | 000,000,430 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2013/03/28 23:13:14 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe
[2013/03/28 23:13:12 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe
[2012/12/15 02:49:52 | 000,000,132 | ---- | C] () -- C:\Users\Usuario\AppData\Roaming\Adobe PNG Format CS6 Prefs
[2012/11/27 01:18:46 | 000,038,912 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2012/09/15 01:15:53 | 000,711,240 | ---- | C] () -- C:\Windows\is-ISB6J.exe
[2012/08/14 21:38:29 | 000,000,002 | ---- | C] () -- C:\Windows\msoffice.ini
[2012/08/14 20:26:52 | 000,000,335 | ---- | C] () -- C:\Windows\nsreg.dat
[2012/07/28 22:17:17 | 000,226,437 | ---- | C] () -- C:\Windows\hpwins20.dat
[2012/06/01 20:14:27 | 000,000,262 | ---- | C] () -- C:\Windows\{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}_WiseFW.ini
[2012/04/16 16:17:53 | 000,170,636 | ---- | C] () -- C:\Windows\hpwins27.dat.temp
[2012/04/16 16:15:46 | 000,000,385 | ---- | C] () -- C:\Windows\hpwmdl27.dat.temp
[2012/04/16 15:50:54 | 000,170,689 | ---- | C] () -- C:\Windows\hpwins27.dat
[2012/04/16 15:24:21 | 000,189,248 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012/04/16 15:24:19 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2012/04/14 18:39:45 | 000,000,064 | ---- | C] () -- C:\Windows\wininit.ini
[2012/03/17 00:23:35 | 000,007,604 | ---- | C] () -- C:\Users\Usuario\AppData\Local\Resmon.ResmonCfg
[2012/03/09 01:31:26 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012/03/09 01:31:26 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2011/12/21 01:09:36 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2011/12/19 13:09:34 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011/11/30 22:59:26 | 000,042,392 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
[2011/11/18 22:05:08 | 000,163,840 | ---- | C] () -- C:\Windows\IsUninst.exe
[2010/02/26 21:22:32 | 000,000,000 | ---- | C] () -- C:\ProgramData\saopts.dat

========== ZeroAccess Check ==========

[2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2013/07/25 23:24:57 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 22:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 09:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== Alternate Data Streams ==========

@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:BC359956

< End of report >


EXTRAS

OTL Extras logfile created on: 10/16/2013 2:29:17 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Usuario\Desktop
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16721)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

8.00 Gb Total Physical Memory | 5.87 Gb Available Physical Memory | 73.42% Memory free
15.99 Gb Paging File | 12.04 Gb Available in Paging File | 75.26% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931.41 Gb Total Space | 255.72 Gb Free Space | 27.45% Space Free | Partition Type: NTFS

Computer Name: USUARIO-PC | User Name: Usuario | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.chm[@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cpl[@ = cplfile] -- C:\Windows\SysNative\control.exe (Microsoft Corporation)
.hlp[@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta[@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf[@ = inffile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.ini[@ = inifile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
.js[@ = jsfile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.jse[@ = JSEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.reg[@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.txt[@ = txtfile] -- C:\Windows\SysNative\NOTEPAD.EXE (Microsoft Corporation)
.vbe[@ = VBEFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.vbs[@ = VBSFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsf[@ = WSFFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)
.wsh[@ = WSHFile] -- C:\Windows\SysNative\WScript.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = comfile] -- "%1" %*
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\SysWOW64\mshta.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.inf [@ = inffile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\SysWow64\rundll32.exe (Microsoft Corporation)
.js [@ = jsfile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\SysWow64\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\SysWow64\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\SysWow64\WScript.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Nico\Tools\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Nico\Tools\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\SysWOW64\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Nico\Tools\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Nico\Tools\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Nico\Tools\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0016BD2B-E380-47AC-82B4-E7452AB3E5E5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe |
"{02296C97-1A26-4421-B0C6-85C5749F13B4}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{0704F77C-4542-494A-A7FC-AF4764AA3CF9}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{0A52A786-7E1C-4674-AF57-48A7B3A9840E}" = lport=137 | protocol=17 | dir=in | app=system |
"{0BD4FD6C-147F-4EE4-998F-6EB915A05F3B}" = lport=10243 | protocol=6 | dir=in | app=system |
"{107AB621-22F4-40BF-BA27-24836A50A453}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |
"{20AE948E-A9CB-4B95-8EBB-4E994AC6EE10}" = rport=445 | protocol=6 | dir=out | app=system |
"{26E36FB3-1595-4829-8229-58E574BB3E3E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{38E75B1F-7703-43B2-934A-F6989A9A419D}" = rport=137 | protocol=17 | dir=out | app=system |
"{503CFA4E-380C-43E6-BFDB-98497F49F6BD}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{51E272CE-C0EA-41FC-B3FA-58C06E2599EF}" = lport=7935 | protocol=6 | dir=in | name=adobe flash builder 4.6 |
"{57596BD6-029D-4C05-B7D3-D79AF68AA8CF}" = rport=10243 | protocol=6 | dir=out | app=system |
"{6160164E-6447-463C-8657-320A510824A3}" = rport=139 | protocol=6 | dir=out | app=system |
"{6309AE18-0B76-498D-B0D3-84192691FF58}" = lport=2869 | protocol=6 | dir=in | app=system |
"{7BD183EF-365E-4E8A-94DF-22FB32CF4618}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7E8D45C8-11B7-4B5E-981E-E8E336E6383E}" = lport=139 | protocol=6 | dir=in | app=system |
"{84015206-7523-4BFC-8A41-F9DB5C2AB1C0}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{89A88A91-F9A4-4BE0-8FB1-E82E760F5D37}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{8B4FCC1C-977B-4D77-AE78-E5A7E3E32290}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{9CA7D878-B02C-46B7-BA27-342CA1717EA4}" = lport=49237 | protocol=6 | dir=in | name=akamai netsession interface |
"{A65127E3-41E3-4564-A184-2036B25F54A3}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{A71D1E19-48F3-4987-8E44-B42B6EB09D90}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{BD130624-367E-4EDB-8B19-77AECDA38620}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{CD56BDA3-B121-4D03-943D-8F95DB37CB29}" = lport=445 | protocol=6 | dir=in | app=system |
"{DF8AD2E2-8265-4830-9536-8E7F5D77F730}" = rport=138 | protocol=17 | dir=out | app=system |
"{EB2B860C-E91B-40F7-B93E-070447E67186}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{F598F873-0EC0-4541-BA90-6BD7F69134F2}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{FE639976-75D0-4F7A-9E6D-70F005E077DD}" = lport=138 | protocol=17 | dir=in | app=system |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00DCD86E-4C40-4D02-93D3-963705571775}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\company of heroes\reliccoh.exe |
"{010ED1C4-6884-4BB9-8ABA-82F8787AF06C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect\binaries\masseffect.exe |
"{0199093E-3FAA-41F9-9B91-AEC2F160C479}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{01D883C8-138B-4248-A7FE-6CC465CB9177}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{0228CAB2-1C4A-47D1-9D69-C06FE1C666A1}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{02801306-2026-466C-B3AD-8D0D474E306A}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{03A8FD30-3253-454F-AFEA-972F9933F812}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\darksiders\darksiderspc.exe |
"{0416C9E5-9273-4FEA-B64B-EC36DABDC62A}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{042B2D83-E4A9-4FE1-AA94-0FB801093378}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight ii\modlauncher.exe |
"{04881F36-4E94-42AD-AFEF-063127F491B3}" = protocol=17 | dir=in | app=c:\nico\games\acr\acrsp.exe |
"{0544F225-0D8E-47CB-A50B-0F878D38A079}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{06172D2D-B84B-4AFB-88C1-7227EBCE5F63}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{06336A11-DB3C-4733-A8BB-7DD671631D6E}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\darksiders\darksiderspc.exe |
"{064F3FB0-42D6-42EA-879F-AE676DA4DBE7}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\garrysmod\hl2.exe |
"{0761A6F4-0B16-4846-9F6B-6092BCC41EAF}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dawn of war gold\w40k.exe |
"{07AAEBD6-DC59-4C0C-BA18-121D57392B8E}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{07B5AE07-8218-4346-9EF4-EE81243CE09D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{081BCA56-FCB7-40CB-9440-6C235A5269E4}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\projectzomboid\projectzomboid32.exe |
"{08FC1BCA-01B8-42E9-AAB1-910FFE078410}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{09C5FC85-7E49-4C69-ABBD-0D10A92D812B}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\cry of fear\coflaunchapp.exe |
"{0BFF9258-A7A1-4A2E-B1BD-016D61E58989}" = protocol=6 | dir=in | app=c:\nico\games\dragon nest sea\dragonnest.exe |
"{0C8EC6F7-C090-4799-94A5-2FE9B9B68DF2}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\hotline_miami\hotlinemiami.exe |
"{0DF778C4-1E6C-4DEC-BDAD-859176C583BD}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{0EADB10F-793F-433E-91F6-C9450A858124}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\magicka\magicka.exe |
"{0EF56233-CF17-4541-A262-C0198B5D433C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\intrusion 2\intrusion2.exe |
"{0F15A1A4-1A29-480A-83ED-F5E5B48109B6}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\cry of fear\coflaunchapp.exe |
"{10DEC458-C59F-43B9-AE34-0D3D11F266C7}" = protocol=6 | dir=in | app=c:\nico\games\eden eternal\edeneternal\_launcher.exe |
"{12196969-38C0-43D6-9380-D3DCB9D7A988}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\capsized\capsized.exe |
"{13367D19-6B82-4E0E-90F5-62A9E397EA66}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\oil rush\launcher_steam.bat |
"{13B55D9E-1A6C-4D88-8607-0F57987A55A4}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{14CA4DEF-6326-4CC1-85B5-0B2C64F80FDD}" = protocol=17 | dir=in | app=c:\nico\games\acr\acrmp.exe |
"{1508E082-07A1-4B59-B473-FDCDD85AB6B5}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{15541E3A-0B9D-4DB2-AE4E-223568CCF4E2}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{163AC30C-D022-437C-A4DD-A8733DB74085}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{16EDEFBE-0CCA-47D2-B220-030F2339E318}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{176754D7-8A41-4AFD-AA7B-89A7AB68A77C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{182CCD8E-1C36-4EFF-A975-CE88D4B16756}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\intrusion 2\intrusion2.exe |
"{1931D919-A6C6-4F19-8B75-BE8469DE2461}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 beta\dota.exe |
"{198B1D98-5E21-4038-BA71-5F9C738688DC}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\portal 2\portal2.exe |
"{1ABF7FC3-28D0-4B11-88DA-A758C332908A}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dead space\dead space.exe |
"{1E26409C-20C5-4481-8FF7-F0B7A207097E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgh.exe |
"{204315AE-C2C4-437E-BDF7-4DE91DB77FDE}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{204F52AA-5D84-45BA-82CF-5A8DAC296767}" = protocol=17 | dir=in | app=c:\programdata\happycloud\cache\tera\client\binaries\tera.exe |
"{20B5DAD7-3180-4D11-BB2D-2534F7DF4D5B}" = protocol=17 | dir=in | app=c:\nico\tools\bittorrent\bittorrent.exe |
"{22519E9D-8FA9-4BB7-AF66-8B0F2CE098BB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\binaries\moh.exe |
"{25213B08-0EA3-48FC-8EC8-8CD06F9E0066}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{2571D183-433A-44A7-8DAE-40E5B493AB76}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\lone survivor\lonesurvivor\lonesurvivor.exe |
"{261E3832-AC2E-44E2-9006-F82B05A56CD3}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 beta\dota.exe |
"{26C245FE-EFFE-452A-BD75-17265B3EB324}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\projectzomboid\projectzomboid32.exe |
"{2887D23E-BD62-4058-8A1E-CF9466E5BFB1}" = protocol=17 | dir=in | app=c:\nico\games\squareenix\final fantasy xiv - a realm reborn (beta version)\boot\ffxivboot.exe |
"{29C0CCEE-83CE-469A-9756-01ED28C852FA}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\bastion\bastion.exe |
"{2BD2763B-547C-4D26-8391-EBEAC0461064}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{2C265C26-1292-444C-B122-98A5FE94DBD0}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{2C5DC137-593A-47E7-BF57-C6E5274E1BFB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{2D56E33D-4890-4C35-ACD8-FC6AE8540631}" = dir=in | app=c:\nico\games\dark souls\darksouls.exe |
"{2D978E39-AB0F-4BBA-B670-850A4C592091}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{30BB7FCC-D727-4329-A41A-4379A5A732C7}" = protocol=6 | dir=in | app=c:\nico\games\acr\acrsp.exe |
"{30DAED99-7161-4DA2-92A1-31B5C1A7FDFA}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{30F2FE5F-5A99-4845-A181-02891E111758}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\company of heroes\reliccoh.exe |
"{3175763B-7D0C-4687-8419-FB22A600090D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dear esther\dearesther.exe |
"{318212A2-341D-470C-AF78-ACE87C01D865}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dead space\support\ea help\electronic_arts_technical_support.htm |
"{324C1FA0-7CC0-490A-9559-D3750BFD03A0}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe |
"{325364C6-5220-47D6-90B5-780B9F47804A}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\metro 2033\metro2033.exe |
"{329F6AD5-DF97-4CD6-A785-78B8E4946624}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight ii\torchlight2.exe |
"{33E18CAA-1DF0-40B2-B386-36D3434A7080}" = protocol=17 | dir=in | app=c:\nico\games\acr\assassinscreedrevelations.exe |
"{34D37489-4521-4B97-BCA7-6624E016833F}" = protocol=58 | dir=in | app=system |
"{355E5369-893E-4039-B431-11BAFD8464E5}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counterstrike source beta\hl2.exe |
"{357DBE30-34EB-4C03-BDF2-277785C0C992}" = protocol=6 | dir=in | app=c:\nico\games\eden eternal\edeneternal\launcher.exe |
"{35E4B88B-9C3F-40FA-8AA7-C3CF3BD9624A}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{36B2A6E5-8155-47CD-9AD7-AF02CDF02823}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{38141CCC-16A9-40F6-82D9-DCE2AA56A140}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{383ADAE4-CDD7-4420-8656-03AE195CD7C8}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{38E916AF-B19A-4F89-ABB7-C351BFABE344}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{390EA74E-EC76-4310-A9E2-7B0DB2C83E76}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{3976B266-6087-4D2D-BFD2-7FDEA0D5A593}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3B211095-13EE-4E51-9485-6527CD18E8DC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3BB88492-AA96-42AA-B8BC-CF984BCF6ECB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\eye\eye.exe |
"{3DE6178D-D9D8-451F-9877-B851EA95A1A7}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\game_launcher.exe |
"{3EB1DB5F-B17C-4000-8354-AC02EEF02778}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{3F9502F7-8868-4952-8C5B-E0529B3E9577}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\ricochet\hl.exe |
"{40576CBA-1882-49FF-8671-9671C4BBF9D9}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{4062E3B4-43D0-49F8-8018-9DB80A727ADE}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{40DDCDCE-3ACF-4443-8CEF-2A09371FCF67}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqsudi.exe |
"{41432EAF-D578-40CA-A343-46EEC58582F8}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{417DAAF3-7575-4FE0-8B9D-75A81E6105AA}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\bastion\bastion.exe |
"{41AB448F-E0CA-488C-8C90-23ED15A6519D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpoews01.exe |
"{43FC7536-2D26-4D98-A5C8-56A01038666E}" = protocol=6 | dir=out | app=system |
"{45BD6E54-E54B-44BC-8C48-B5FBA7CF1520}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{4685B7BB-0D06-4431-945C-52720B4AAC6D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{46A97949-B9D5-4AFB-BFAC-7308751DB0AF}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\mp\mohmpgame.exe |
"{477F5983-7867-43BF-8086-59799DFF5E4C}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{484094CC-ABF0-4889-8F5A-99690EAB321B}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqtra08.exe |
"{48E0624C-DAC4-468E-8FAF-E6575389DEEF}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dawn of war gold\w40k.exe |
"{4A51AF83-08A7-4A6B-A242-429804760190}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight ii\modlauncher.exe |
"{4A7613CB-7697-49F6-B303-B6E573CBA196}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\payday the heist\payday_win32_release.exe |
"{4DAD3E73-3A6A-4DD6-AF24-D23829036F09}" = protocol=58 | dir=in | [email protected],-28545 |
"{4DC1A028-C17C-4F92-A226-306E19268414}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dead space\support\ea help\electronic_arts_technical_support.htm |
"{4DC7C069-C278-4BA2-AFA9-080AB0A0F3D1}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{4E2BDDB3-EE82-47B6-8A1D-507BEA656C40}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{4F743E4F-8F11-49B7-8A69-936A1C3D2F8A}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\psychonauts\psychonauts.exe |
"{51A81A94-5153-4528-8D86-312DFC05C332}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\magicka\magicka.exe |
"{528C66E8-5177-4D6D-B429-EF2BA489F601}" = protocol=17 | dir=in | app=c:\nico\games\squareenix\final fantasy xiv - a realm reborn (beta version)\boot\ffxivlauncher.exe |
"{530B5C24-FF41-45EE-B238-05E9CFC6C69D}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\portal 2\portal2.exe |
"{536C8D01-B39C-40FC-AB62-051E684DB7D1}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\amd driver updater, vista and 7, 64 bit\setup.exe |
"{53ABB52B-063B-4C91-B163-7FB1FDDA80F2}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\ricochet\hl.exe |
"{53DF8A7E-FC69-4136-8327-2F204A0213F4}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\garrysmod\hl2.exe |
"{54B58DF4-BBE0-4E4E-A46F-6886D53FAE48}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{56206D40-77E3-4D22-AAB3-614DBFDCDD54}" = protocol=58 | dir=out | [email protected],-503 |
"{5644CAC1-8114-4F43-98C7-C8765CF3E18F}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{564EF241-5B78-48F4-B7BC-2469DF82A67F}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\deathmatch classic\hl.exe |
"{575F7AD2-F68A-4507-85D6-7966517C7D4F}" = protocol=6 | dir=in | app=c:\nico\games\acr\assassinscreedrevelations.exe |
"{5825EABF-FD9D-4463-BFAA-99913E8C2A15}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{5948E752-0FAE-4F8E-BDD8-6C35DA23D8D1}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{59588110-EA06-43D4-80CD-B421E3796C48}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{596D11B5-696F-4122-8CBA-1116A91EDCA1}" = protocol=17 | dir=in | app=c:\nico\games\dragon nest sea\dragonnest.exe |
"{5A29CFA3-ED0B-4860-AF28-68EB1FFF2DB2}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{5A4FBE4B-C0E4-4D97-89EA-27E598170C61}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2\arma2.exe |
"{5B2B4579-EDC6-4091-B8FD-205D99D22E84}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{5B4671D0-729E-420D-88B9-95C51C60BCBC}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\battlefield 3\bf3.exe |
"{5CDE7B91-7965-49FB-A7CC-D2EE43D96229}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{5E7069E9-79A1-4CD7-B75A-5C7790172EF5}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dead space\dead space.exe |
"{5F1D3E66-EBDA-491D-BF64-31A4F7C84F4E}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{5F7117A4-DD95-4521-A063-05AF34078E26}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\team fortress 2\hl2.exe |
"{61DCAC0B-D4A6-4EA9-ABF1-B580631976F2}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgpc01.exe |
"{623A84BF-24FF-4E4F-9E5F-B4219C3F7325}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{6304C0C0-EB38-44C2-9A4E-0D44A591BA94}" = protocol=17 | dir=in | app=c:\nico\games\eden eternal\edeneternal\_launcher.exe |
"{64291E2D-A6D6-465B-BD05-B15FBB9EA357}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\support\ea help\electronic_arts_technical_support.htm |
"{65635B00-186D-4ECB-BE47-35F1B3261F91}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\hotline_miami\hotlinemiami.exe |
"{66511B76-E731-4FF5-8766-391D819C3ADB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\redfactionarmageddon.exe |
"{66D1CABE-9717-49F9-A465-7A80BD19DFA9}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{67142BF2-7D9B-4BCE-884B-9DB98CBCE54E}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\redfactionarmageddon.exe |
"{6798D11F-2B0A-4803-A0F2-74F65E3725C2}" = protocol=6 | dir=in | app=c:\nico\games\acr\acrmp.exe |
"{67D0C306-2292-4C1B-9444-38C61DFE054E}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{685BC7CD-F85C-4291-A6F0-9A5BDB520903}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dear esther\dearesther.exe |
"{694921C2-26AE-4CFB-BCB5-CA9B84F6D409}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{6AE6DFDC-1CDA-4CF9-9D45-00D290963FD1}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\metro 2033\metro2033.exe |
"{6CAA2581-0E39-46E9-B473-3CD9E1AB15D8}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\terraria\terraria.exe |
"{6CDA9E27-1396-445E-9C24-D784A912F0F6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\payday the heist\payday_win32_release.exe |
"{6DDBDD58-EFA3-48DF-A9AD-EF7B2F3D79C9}" = protocol=6 | dir=in | app=c:\nico\games\squareenix\final fantasy xiv - a realm reborn (beta version)\boot\ffxivboot.exe |
"{6EAC3E11-2EB7-437B-8323-8DC60ABEE8F5}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\psychonauts\psychonauts.exe |
"{6ECD8F6B-A3DD-4FBB-8253-80D6166C557D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\titan quest\titan quest.exe |
"{6F9F5484-3DB7-434A-BABC-772D73BA605D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight ii\torchlight2.exe |
"{70A73E3D-649F-4803-8DE3-A5DB12D0CFDD}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\counter-strike source\hl2.exe |
"{7111E599-9009-4A15-A439-F140EC9486A6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\binaries\moh.exe |
"{718B2EDC-4332-46B1-BE51-CF21411FBDF6}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{72098083-C3FD-4EA7-B0F2-678EFD85FE58}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{7237A5B9-5130-4D89-95A3-AF713DC8F3C5}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{7320098B-AAD0-474E-BABB-7A4B777FF985}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{7331D7CB-EE28-46A3-AAD8-1283ED1C053D}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\game_launcher.exe |
"{7492666F-53E0-4D7C-9E35-614AB116EF52}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |
"{753B0659-FF93-45FA-BA38-F5B839EAC893}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{757B142F-52CF-4948-87CB-931DF185265D}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{764E1E15-433A-417B-B2E2-2677E34F02D0}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\little inferno beta\little inferno.exe |
"{7749B14B-ECAE-4010-8836-77D4ADBB4D81}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{77513F02-5C1F-4532-93E0-AADFFBF2DB78}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\kerbal space program demo\ksp.exe |
"{77705720-8C60-41FC-8265-CB564C24AA1D}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counterstrike source beta\hl2.exe |
"{779E5805-8305-4091-948C-54DA169D3500}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{77C671F0-9CAB-4F41-B561-9B53EA0540DB}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{77F4C4E5-AAF2-4439-8DCF-A025FC873021}" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe flash builder 4.6\flashbuilder.exe |
"{78150600-3084-4F75-98E6-6FD865D14355}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\eye\eye.exe |
"{781E454C-386C-4285-9D01-1DBAE37C8F6F}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{7821E1F4-6466-4925-8A15-4EA457896554}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\portal 2\portal2.exe |
"{7A2F80F2-780D-4ADD-879E-7FFCC741CEB6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{7AD6655B-AF60-40B6-8C33-CA52326329AA}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 beta\dota.exe |
"{7ADD629D-64D5-4F16-B1C4-4FF6720325D0}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{7B0186AC-C6DA-4A21-ABAA-0614C9F30066}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{7C9527FF-EBE2-4101-81B1-BDAB1FC64B2C}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\burnoutparadise.exe |
"{7D93D17C-B19B-49D9-B29C-298448B69D42}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\redfactionarmageddon_dx11.exe |
"{7D9D4A38-E613-435F-B963-DC2E11A57D9D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\burnoutconfigtool.exe |
"{7E7BD9D6-F718-4693-828E-304E91661EAE}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{7E8F7061-3384-4201-9C5E-BB257BE4B675}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{7FBF62D2-AD53-4FD1-AAD6-C06EA8E5B14D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{801DAF1F-C704-4267-9353-648EABEEB4C6}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{81045A20-BAE5-41AA-B52F-88CCA017921B}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{810BCCE8-1D04-4E5B-B1A4-615293041006}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 beta\dota.exe |
"{81238A04-BF27-4E5B-B4AA-90A168A8B9AD}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{81A3D1A1-E877-43BC-9A8A-8B326DDAA34C}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\red faction armageddon\redfactionarmageddon_dx11.exe |
"{81BFBAF8-EBC5-411E-89BB-A43D5B6288BD}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{82485732-3423-42EA-9237-2F1C2CC4C0BC}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\team fortress 2\hl2.exe |
"{829AC89A-4A41-4471-92DF-3B21BA4C2AB3}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\kerbal space program demo\ksp.exe |
"{86EE1856-028F-40F8-A517-011BCD6AABE7}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{87EEC4FF-2A42-4E03-B903-6B610C3BDCB1}" = protocol=6 | dir=in | app=c:\nico\games\eden eternal\edeneternal\_launcher.exe |
"{8847FA18-130E-4E9C-930A-0D7B4DA22ABB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{88B8E19A-5FCD-4387-ACEA-60B1F4909A92}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{88D955BE-A997-4042-8F80-4AE19C1CD6EE}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\garrysmod\hl2.exe |
"{8952132A-83EB-4150-819E-D3B385C45323}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{89DD612C-2CD5-4DD9-A456-4C116EDDA91A}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 test\dota.exe |
"{8B7719F3-D4BF-4296-835E-DEE47F25E1C6}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\team fortress 2\hl2.exe |
"{8BA9A4AC-D375-4604-B025-400A8564BD04}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqkygrp.exe |
"{8C8BFFB2-DFCE-4A92-85D6-5280E778E552}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mirrors edge\binaries\mirrorsedge.exe |
"{8D4818E1-50C4-4D3F-A2AA-0FB1B95FB4AB}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\mp\mohmpgame.exe |
"{8E520F11-7F68-4B44-8D1D-544622E1D4D6}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{90D268A8-2B98-4636-A1AF-0EE4591D5A9C}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpzwiz01.exe |
"{91651B59-24BE-4084-9645-F4D5CF39A8A0}" = protocol=1 | dir=in | [email protected],-28543 |
"{9172F706-0282-4FF5-9648-B275053B3466}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counter-strike\hl.exe |
"{921794DA-BE6F-4B12-A317-234F99A8DF46}" = protocol=17 | dir=in | app=c:\nico\games\eden eternal\edeneternal\launcher.exe |
"{93BC792F-7D64-402F-A685-6AF54EFF7471}" = protocol=58 | dir=out | [email protected],-28546 |
"{94429392-5B8C-49E5-B522-68BF8A183EEC}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{956AE83D-8E34-48E5-89B2-782BC751B6BD}" = protocol=17 | dir=in | app=c:\nico\games\eden eternal\edeneternal\_launcher.exe |
"{96022FA7-BDB6-492D-AD87-D5FFE5B64950}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\little inferno beta\little inferno.exe |
"{961840C9-AD5D-4C53-A166-6011CA07625F}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{97639713-A753-4371-A2DE-F8372262476B}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{985E9905-B652-4873-B43C-CF845584725B}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\groove.exe |
"{9907C70D-3F17-4898-87B6-47E0D70360A2}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\proteus\proteus.exe |
"{9AE4A255-6BBB-4FD1-8D05-88DC07AF17A3}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{9D1AABA4-3984-4DC6-AE5D-287FACB66E29}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\portal 2\portal2.exe |
"{9D834B39-8F56-452B-8C0E-AD00098F89F7}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{9E37D07C-0B95-4B9D-85C7-A804A3FE58A0}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpse.exe |
"{9EDCDF17-C8E9-408F-A8E1-508244B93D9A}" = protocol=17 | dir=in | app=c:\nico\games\dragon nest sea\dragonnest.exe |
"{9EEB8235-17E8-4112-BB9C-0E6F8260B7D7}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{9F65B54C-FEEB-4A5C-A8A8-F5464585863C}" = protocol=17 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{9F78E258-BBC1-44DF-9294-2F63B27B28CF}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\day of defeat\hl.exe |
"{9FA141BA-EE83-4D06-9323-9BFDE5282BF4}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqusgm.exe |
"{A0FD8EA4-E398-4A5D-B0A2-38BDA44D913C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\team fortress 2\hl2.exe |
"{A164A586-BDD2-4E69-B019-2E0C8E770406}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2\arma2.exe |
"{A19B8300-FA44-4752-B4E3-D3264BC092BA}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe |
"{A248D867-4B73-4BDB-BCA8-32C0A48D13AF}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{A25C5A5B-40A2-457E-BB0C-784B484D0F58}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpfccopy.exe |
"{A2EE5657-57B8-4DE2-A041-C39AA3D6FBE2}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{A3DA4A14-BA99-46B7-949F-2C51FF815981}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{A42F191A-EA8C-4990-8CAD-B4A754FDAB13}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{A4928BAE-E768-4C00-9CA6-B3499D398BD6}" = protocol=1 | dir=out | [email protected],-28544 |
"{A557307F-24C8-4BC2-AFE4-3384C2119587}" = protocol=17 | dir=in | app=c:\programdata\happycloud\cache\tera\tera-launcher.exe |
"{A5946388-7EC2-401E-B054-08CB5C1D2DEE}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{A5E5D73D-45A6-4DA8-9337-54101AC76ED4}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight\torchlight.exe |
"{A75A14C2-8880-4E34-B07D-8D9308709EC5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxm08.exe |
"{A779754B-23D4-4857-855E-4A2D8BD5CE57}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqste08.exe |
"{A9670152-6BAD-4B96-AD81-3BC5C6910EFC}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{A9CE30EE-089D-4489-8CA2-B6536CD7D51D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpiscnapp.exe |
"{AEC6B067-9F8B-42A6-BDFF-FFC0598F1CC6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 test\dota.exe |
"{B0C64335-A965-41F4-8131-599EA4A48933}" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe flash builder 4.6\flashbuilder.exe |
"{B1065F71-319D-4D86-9A11-44EA105B9561}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\brutallegend\brutallegend.exe |
"{B15000E1-31F8-4227-811C-8447A081ED74}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{B269FEED-D61A-4B65-A05F-B1E169ADE892}" = dir=in | app=c:\program files (x86)\hp\digital imaging\smart web printing\smartwebprintexe.exe |
"{B53412E1-7849-4256-BD04-CE9C9349B8B0}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\game_launcher.exe |
"{B6A03CEA-EA57-4F37-B950-1C65A332DE17}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |
"{B78930E2-EAFE-45E0-AB45-2E62B473799C}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{B79A9BF3-7AE9-4935-B9A1-952D76BEA089}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{B79C4E68-E464-47BD-9C17-6F7965FC378F}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\lone survivor\lonesurvivor\lonesurvivor.exe |
"{B89DE45F-1B36-434A-B267-03B72EB62318}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\proteus\proteus.exe |
"{B89F68BF-3754-4B76-9BC5-7FAF310AA5C0}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\planetside 2\launchpad.exe |
"{B9066F16-329D-4978-9A6C-5B320163749C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\planetside 2\launchpad.exe |
"{BA2AECB4-026A-462D-B709-69665EC0AF97}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\tinyandbig\tinyandbig.exe |
"{BA2D4DDE-8DA9-4FB6-BEFE-2E02828EB907}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mirrors edge\support\ea help\electronic_arts_technical_support.htm |
"{BA7095D2-7FB0-42C9-BEC0-9575AC60A625}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\tinyandbig\tinyandbig.exe |
"{BAE7682E-B23F-4E31-9D22-C09A58FE9F02}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BB6CFF1C-5A25-49D0-9378-7813853005B8}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{BBB9BA1D-D650-436B-BBF3-37F382B5EC70}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\capsized\capsized.exe |
"{BD80A7EC-BA20-43D5-B26B-218A295BC8D8}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{BD864D9E-558D-44B0-8D65-085414F9453F}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{BD8F0CF2-A04C-41C2-B848-588D8481B70C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BE4E5AB2-FFFB-4DA2-95ED-0F46CEB24A69}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{C04E780F-48A3-4F7F-8676-3969E826CB5C}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{C0B4ED35-4C32-42D6-A01A-F4C9CC84976A}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\burnoutparadise.exe |
"{C27891FE-CD87-43D8-944B-3A7C5A3BC9A9}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steam.exe |
"{C2E1E47D-D220-496B-B846-5DAC4EFB14E8}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\brutallegend\brutallegend.exe |
"{C3141978-DD6B-4780-8540-F208C166F99B}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\garrysmod\hl2.exe |
"{C34DAA9F-D0C9-4691-8018-E3345E31D43D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\saints row the third\game_launcher.exe |
"{C3A824B0-9798-41A9-B86B-19EF83D6CF12}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{C44A52ED-2D1D-40B7-89F4-AED35B17BB5C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\supermnc\binaries\win32\supermncgameclient.exe |
"{C5F844EC-BDFE-49D0-BE39-E568D4370DD9}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{C651B892-1281-44B8-8BF3-F510AEE088AB}" = protocol=6 | dir=in | app=c:\programdata\happycloud\cache\tera\tera-launcher.exe |
"{C7FA8DE0-4A01-4212-9B86-5C0B81F29316}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\support\ea help\electronic_arts_technical_support.htm |
"{C80F4E80-19D0-473C-9FAB-A9E112D025C6}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\burnoutconfigtool.exe |
"{C853D656-8921-4A72-A0AE-AD060DB534C0}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\fallen earth f2p\feupdater.exe |
"{C93044A9-261D-4F81-AC60-F71CD87C60D2}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{C9D382AE-5497-4767-A0A2-7CF65FF3856C}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{CADB4B6D-8FA1-4002-A12B-314BE27C2D03}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{CBBE677C-8BE3-4686-BFBB-67B2479A3D0F}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 test\dota.exe |
"{CE3BC518-5E7A-4ED9-90BB-97D3D45372DA}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{CF24593E-BBE9-40E3-8991-779CB0A6413E}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{CF70AC30-6A9A-4E0B-BB7E-B383C5D13375}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{D026A187-C03B-4E83-92A7-01F01F411171}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\bastion\bastion.exe |
"{D02711F3-699E-492D-A90C-119D14094B37}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{D107EFC3-1F97-476C-BD92-392F438302BB}" = protocol=6 | dir=in | app=c:\nico\tools\bittorrent\bittorrent.exe |
"{D20DD233-A35D-471C-BC1B-E52B34C72093}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight\torchlight.exe |
"{D23F8BFD-3781-451F-8E2E-AAC68ABAF5F4}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{D2652609-33A1-41B1-B466-6DC8B5AF5127}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{D3753FBD-E6A4-4480-B94C-8480ED7641CC}" = protocol=6 | dir=in | app=c:\programdata\happycloud\cache\tera\client\tl.exe |
"{D4C7EBB7-A1D0-4A51-AE3A-5E5F8FEFA1D9}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mass effect\binaries\masseffect.exe |
"{D6203618-CA4F-43A0-A638-C9F1EBCC4E71}" = protocol=17 | dir=in | app=c:\users\usuario\appdata\local\akamai\netsession_win.exe |
"{D68A0218-7444-498F-89F6-F13F3A9D00F5}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqfxt08.exe |
"{D6ED20DA-88D0-40E3-AC37-CC14AE5F825F}" = protocol=6 | dir=in | app=c:\nico\games\dragon nest sea\dragonnest.exe |
"{D9196B7B-F0BF-4047-B163-F76395F898E2}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{D98A8384-B380-47FC-A9F2-4B519AF82816}" = protocol=17 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{DA41DCE3-EF9C-4ACD-BDC4-3FA69025A0F6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\day of defeat\hl.exe |
"{DA905878-7A2F-48C8-B569-68008846A1CF}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{DB1F0F27-1887-402E-B573-8710367EC955}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{DE0F3217-A28D-4975-99E3-63C1180A3307}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{DE6ADA98-028F-4EA9-9E40-347CDA44FF38}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{E05A8429-44AB-437C-855F-6F28240C2344}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2\arma2.exe |
"{E08492ED-0EE7-4A07-8359-11B30ADFD8A2}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2\arma2.exe |
"{E0D198A8-D9BA-45B2-A13D-B2799FDB00BA}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\counter-strike source\hl2.exe |
"{E178EFB9-F2B2-41B3-B975-203489AA3BC6}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\dota 2 test\dota.exe |
"{E5BF1D7E-D7A8-4346-A6B3-FB27E3310A85}" = dir=in | app=c:\program files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe |
"{E75079B1-3694-424F-92CA-286E358DB613}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counter-strike\hl.exe |
"{E7A04256-0062-4D65-9E82-985D0D88C16D}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqgplgtupl.exe |
"{E882E7F2-EEAE-4B49-A826-F0E528F5C3E3}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counter-strike\hl.exe |
"{EB5431F4-CDC9-4D0B-A277-C9D8A99158A1}" = protocol=6 | dir=in | app=c:\nico\games\squareenix\final fantasy xiv - a realm reborn (beta version)\boot\ffxivlauncher.exe |
"{EC06D4CC-37A8-4604-90C8-877EE3D091CD}" = dir=in | app=c:\program files (x86)\hp\hp software update\hpwucli.exe |
"{ED22E29D-6E3E-487D-A501-CA0227298B51}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\psychonauts\psychonauts.exe |
"{ED777B57-CF85-472C-8F39-22C3D9C7E4B9}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{EE5CCC99-7542-49A4-97C9-482CEA969669}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\counter-strike\hl.exe |
"{EEBED772-437B-40B1-A8EB-C335CC8A36B0}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\medal of honor\support\ea help\electronic_arts_technical_support.htm |
"{F020D27F-3555-45C2-A3A4-AE7BC700279E}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposfx08.exe |
"{F0BB46BE-2CBC-4B3E-A512-62B8BD017DCF}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpqpsapp.exe |
"{F1136F94-A8E4-4652-977A-64BBC95C7AC5}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\mirrors edge\support\ea help\electronic_arts_technical_support.htm |
"{F18A8131-80E5-42D2-97B6-61844153F64D}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\burnout™ paradise the ultimate box\support\ea help\electronic_arts_technical_support.htm |
"{F33F70AA-CC31-4B9A-92B3-F9E455BA5F04}" = protocol=6 | dir=in | app=c:\users\usuario\appdata\local\akamai\netsession_win.exe |
"{F3FD8687-CAEC-47DF-91B0-9CDEFF158590}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight\torchlight.exe |
"{F44D3CD8-F70B-4BDA-B3FD-7874E71C394D}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\micaso\deathmatch classic\hl.exe |
"{F490E425-1678-4F69-8BE4-B120252DA6EE}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{F50CC104-6D67-41F3-98FC-027BC8611563}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\titan quest\titan quest.exe |
"{F5A67B0A-5166-4CBF-8251-AB20AE802C3C}" = protocol=6 | dir=in | app=c:\program files (x86)\origin games\dead space 3\deadspace3.exe |
"{F6C9F72E-015B-4BFF-89C2-8E01F19D7692}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{F7145213-750E-4275-8375-8D8135C9D248}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\amd driver updater, vista and 7, 64 bit\setup.exe |
"{F766C8D1-27EE-46FB-87E4-C638FAD0FC5F}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\torchlight\torchlight.exe |
"{F78B73CB-B260-4FA4-83E8-B170176F749D}" = protocol=6 | dir=in | app=c:\programdata\nexonus\ngm\ngm.exe |
"{F7AB51CA-B3B4-4E04-9DAD-8B507DE64782}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hpofxs08.exe |
"{F87E8B66-6B7C-4C1E-B382-009219ACF7B2}" = dir=in | app=c:\program files (x86)\hp\digital imaging\bin\hposid01.exe |
"{F8B70F15-846C-4E5D-9485-9498603F2060}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\terraria\terraria.exe |
"{F9223824-3444-40D5-8746-3C449B70AE50}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\psychonauts\psychonauts.exe |
"{FA204E1D-085D-456B-AD82-0D07289D3274}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\superbrothers sword & sworcery ep\swordandsworcery_pc.exe |
"{FB2C382F-A93C-4738-A681-5AD4FCFDD4D7}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\oil rush\launcher_steam.bat |
"{FBC606B1-F591-4720-8CDA-4923AECE3E83}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\bastion\bastion.exe |
"{FBC8122A-C116-4986-B7E5-7A7B42747E82}" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\mirrors edge\binaries\mirrorsedge.exe |
"{FD50BD97-D1EE-49AA-BD0B-FD078CC46837}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{FDE350B5-D974-470B-B9EB-06EB16B18F31}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{FE06C0C3-71E2-4BD5-9196-BA222D461BA2}" = protocol=6 | dir=in | app=c:\programdata\happycloud\cache\tera\client\binaries\tera.exe |
"{FEEAC7EC-EBA5-4E4B-AFBE-FBAA8C8E0747}" = protocol=17 | dir=in | app=c:\programdata\happycloud\cache\tera\client\tl.exe |
"{FFBB500F-82A9-418F-91CD-C4DB7AF07FA6}" = protocol=17 | dir=in | app=c:\nico\tools\steam\steam.exe |
"TCP Query User{7FC687EA-5B5A-4470-B773-BFCD9EF70FBD}C:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=6 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"TCP Query User{E6C300AC-C770-41A0-A6E2-5B4207C03ECF}C:\users\usuario\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\usuario\appdata\local\akamai\netsession_win.exe |
"UDP Query User{059998FE-ED04-4D9D-8725-473AC317C853}C:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=17 | dir=in | app=c:\nico\tools\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"UDP Query User{24AF65EE-3FCA-4DE3-818E-CB752435FEC2}C:\users\usuario\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\usuario\appdata\local\akamai\netsession_win.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{003B37AE-21F5-5BC5-F5EB-CD60A8928696}" = AMD Accelerated Video Transcoding
"{027E5FAB-1476-4C59-AAB4-32EF28520399}" = Windows Live Language Selector
"{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}" = Network64
"{06DB2C4C-DC29-DA42-3B00-5581CBF545BB}" = AMD Drag and Drop Transcoding
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC2
"{0F37D969-1260-419E-B308-EF7D29ABDE20}" = Web Deployment Tool
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}" = Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
"{24965A31-311D-462D-BAA8-B482ABA115D8}" = Microsoft SQL Server Compact 3.5 SP2 x64 ESN
"{27726449-83B8-428D-92DE-101346C1E15C}" = Microsoft Security Client
"{2F72F540-1F60-4266-9506-952B21D6640D}" = Apple Mobile Device Support
"{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022
"{3BC6E87B-7E7B-3F78-9BD1-708B199B1EB5}" = Microsoft .NET Framework 4 Extended ESN Language Pack
"{3C28BFD4-90C7-3138-87EF-418DC16E9598}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{5AF4E09F-5C9B-3AAF-B731-544D3DC821DD}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6397820D-9FC6-774C-1EF5-CBA09049E426}" = AMD Fuel
"{64A3A4F4-B792-11D6-A78A-00B0D0170000}" = Java™ SE Development Kit 7 (64-bit)
"{64A3A4F4-B792-11D6-A78A-00B0D0170100}" = Java SE Development Kit 7 Update 10 (64-bit)
"{653B9326-BD45-53BE-681A-A49CAAEE8A3C}" = ccc-utility64
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.8
"{690285C2-2481-44FB-8402-162EA970A6DD}" = Logitech Gaming Software
"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour
"{76FF0F03-B707-4332-B5D1-A56C8303514E}" = iTunes
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}" = UxStyle Core Beta
"{90140000-0015-0409-1000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2010
"{90140000-0016-0409-1000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2010
"{90140000-0018-0409-1000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2010
"{90140000-0019-0409-1000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2010
"{90140000-001A-0409-1000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2010
"{90140000-001B-0409-1000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2010
"{90140000-001F-0409-1000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-1000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0C0A-1000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-002C-0409-1000-0000000FF1CE}" = Microsoft Office Proofing (English) 2010
"{90140000-0043-0000-1000-0000000FF1CE}" = Microsoft Office Office 32-bit Components 2010
"{90140000-0043-0409-1000-0000000FF1CE}" = Microsoft Office Shared 32-bit MUI (English) 2010
"{90140000-0044-0409-1000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2010
"{90140000-006E-0409-1000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2010
"{90140000-00A1-0409-1000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2010
"{90140000-00BA-0409-1000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2010
"{90140000-0115-0409-1000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2010
"{90140000-0117-0409-1000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2010
"{91140000-0011-0000-1000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{91C4D79C-3579-48E8-ADFA-8818042AEB73}" = Logitech G930
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9AB0D5B6-4779-8C4F-CA91-A1FEDB56D7EC}" = AMD Catalyst Install Manager
"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client
"{A8A0B1C1-FBC7-4790-8E26-9DA1A6A95452}" = Oracle VM VirtualBox 4.2.6
"{AAFE68DD-A2D5-BDBF-E1B2-CB01DEFD6EB0}" = AMD Media Foundation Decoders
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B143BE44-8723-315E-9413-011C55873C0E}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{B40EE88B-400A-4266-A17B-E3DE64E94431}" = Microsoft SQL Server 2008 Setup Support Files
"{B636C9B9-A3F2-4DCE-ADCC-72E095018385}" = Microsoft SQL Server VSS Writer
"{B6C87B73-79A5-401A-A12A-4DD96EC40442}" = Microsoft SQL Server Management Studio Express
"{BCA26999-EC22-3007-BB79-638913079C9A}" = Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU
"{C3C912BB-BF4B-3788-8A19-DA5B999CE0C6}" = Microsoft .NET Framework 4 Client Profile ESN Language Pack
"{C98517B6-DCE9-49B7-B19E-E384178D3986}" = HP Officejet 4500 G510a-f
"{CC4878C0-4A6A-49CD-AAA7-DD3FCB06CC84}" = Microsoft Web Platform Installer 3.0
"{CDDE4895-E348-4230-99E7-F2FA91131D2C}" = HP OfficeJet J4600 All-In-One Series
"{D207019F-D0A5-11DF-A282-0013D3D69929}" = Vegas Pro 10.0 (64-bit)
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{D81C035E-D0A5-11DF-9450-0013D3D69929}" = MSVCRT Redists
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{deb7008b-681e-4a4a-8aae-cc833e8216ce}.sdb" = Microsoft Windows Application Compatibility Database
"{DF0CAFE1-87E6-3DCD-8B93-C6A528A22E77}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN
"{E5748D30-7E6D-3A8E-BFE6-C1D02C6DDABB}" = Microsoft Help Viewer 1.1
"{EEB3F6BB-318D-4CE5-989F-8191FCBFB578}" = Ventrilo Client for Windows x64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer
"Blender" = Blender
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"HP Document Manager" = HP Document Manager 2.0
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing 4.51
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"HPOCR" = OCR Software by I.R.I.S. 13.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Extended ESN
"Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1
"Microsoft Security Client" = Microsoft Security Essentials
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN" = Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN
"Office14.PROPLUSR" = Microsoft Office Professional Plus 2010
"ONAIR_is1" = ONAIR 4.0.0.854
"Shop for HP Supplies" = Shop for HP Supplies
"Theme Resource Changer X64 v1.0" = Theme Resource Changer X64 v1.0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
".sol Editor" = .sol Editor 1.1.0.1
"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0E549A13-2B3D-4633-BA41-DC88C2D6F9A3}" = ProductContext
"{0EF5BEA9-B9D3-46d7-8958-FB69A0BAEACC}" = Status
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{10A16AF7-AD18-40A1-8A94-5CB2316C7323}" = Microsoft Silverlight 4 SDK - Español
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{13464292-6666-B2DB-1B0C-A3FE14DAD1F9}" = CCC Help Dutch
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2
"{185F9795-9663-4F13-9EF9-307A282ADB5A}" = ph
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1" = Euro Truck Simulator 2
"{1EC71BFB-01A3-4239-B6AF-B1AE656B15C0}" = TrayApp
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{2012098D-EEE9-4769-8DD3-B038050854D4}" = Microsoft Silverlight 3 SDK
"{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1" = Geeks3D.com FurMark 1.10.0
"{26A24AE4-039D-4CA4-87B4-2F83216045FF}" = Java™ 6 Update 45
"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 40
"{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}" = Microsoft SQL Server 2005 Tools Express Edition
"{2A075BB4-E976-4278-BF3F-E5C6945D84C0}" = bl
"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver
"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger
"{2A78694E-ACFE-4D5A-9B0F-C0EBEFA3F280}" = Microsoft SQL Server Compact 3.5 SP2 ESN
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)
"{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}" = Microsoft XNA Framework Redistributable 4.0
"{2D8CED57-CCDB-4D86-9087-3BBCAE8F8F22}" = Six Updater
"{2DD84AB2-8BF4-49FA-9D62-E3F93D4F56FB}" = Roxio Game Capture HD PRO
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}" = HP Update
"{2F8B731A-5F2D-3EA8-8B25-C3E5E43F4BDB}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86
"{2FF8C687-DB7D-4adc-A5DC-57983EC25046}" = DeviceDiscovery
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{338CD56F-1CDC-CF32-33F6-DED2DF92284E}" = CCC Help French
"{33F7A957-A66D-45A1-BADF-6576083B14E2}" = RPGƒcƒN�[ƒ‹2000 ƒ‰ƒ“ƒ^ƒCƒ€ƒpƒbƒP�[ƒW
"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery
"{3566D7DB-EA10-49DE-A95B-F4AB41FC0A93}" = Dragon Nest SEA
"{3825B383-7880-48C8-AADD-49B0D764B151}" = 4660_4680_Help
"{3898934B-05AE-41CD-96BE-70DA9BFBCE1F}" = Microsoft XNA Framework Redistributable 3.0
"{394BE3D9-7F57-4638-A8D1-1D88671913B7}" = Microsoft AppLocale
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3D6AD258-61EA-35F5-812C-B7A02152996E}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B10.0427.1
"{3EB6F78A-66E3-434f-BD0E-76C7D078DB5E}" = 4500G510af_Software_Min
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{440B915A-0C85-45DB-92AE-75AE14704A64}" = Fax
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"{46458556-5C46-79A9-A6FF-81DF1F8B2729}" = CCC Help Hungarian
"{46F8CF66-AB83-38A7-99B2-A5BE507EE472}" = Microsoft Visual C++ 2010 Express - ENU
"{476CD9DE-C45F-4443-BFA7-E51C58B7E455}" = Populous
"{4869414E-7AEA-4C8E-BE1C-8D40977FD517}" = Adobe Illustrator CS6
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4E4D0FA1-F880-4CCB-999A-501000008200}" = Dark Souls Prepare to Die Edition
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.9
"{50802F8E-03B4-479D-A643-16DE5A3586CB}" = BPDSoftware_Ini
"{50816F92-1652-4A7C-B9BC-48F682742C4B}" = Messenger Companion
"{519D68B8-A768-4CDC-E4C9-B115D49CED93}" = CCC Help Norwegian
"{51D383BC-D988-8C1E-FAA1-BC5260A32A87}" = CCC Help Polish
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack
"{5A883D2B-D279-0D01-6E62-B810AFD8CC62}" = Catalyst Control Center InstallProxy
"{5AB7D739-1735-3A9E-BE73-C43507CB4E6F}" = Microsoft Visual Studio 2010 Service Pack 1
"{5BB4D7C1-52F2-4BFD-9E40-0D419E2E3021}" = bpd_scan
"{5BDFAB82-060E-438B-AB4F-A2331B2294C0}" = Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219
"{5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411
"{5F187E71-93D7-4849-B5C2-1DD1747C81A7}" = Roxio CinePlayer Decoder Pack
"{6037B8AD-7D5B-4D50-9BCA-A586C44EEF34}" = Ace of Spades
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{67A4760F-9804-CCF6-C319-27840ED77924}" = CCC Help Korean
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69290A89-5CD6-42A2-BBD9-D1EE95A3E490}" = Roxio GameCAP HD PRO
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{6BE5E4A9-D88B-532D-26E6-883C32BF098A}" = CCC Help Thai
"{6CD8D350-5B72-471B-86D5-4BC6DEB8EC6A}" = S4 League_EU
"{6E0D26C1-4265-1D02-4D19-D0A8F6A463F8}" = AMD VISION Engine Control Center
"{6e8f74e0-43bd-4dce-8477-6ff6828acc07}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106
"{6FF4C560-A95B-42DE-83AD-62C8737115E9}" = Roxio Game Capture HD PRO
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{73E80655-FB3C-46F4-BE00-62D248BC490A}" = Visual C++ 2008 Runtime (x64)
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}" = Microsoft SQL Server 2008 R2 Management Objects
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7DD62206-7B6C-E32E-BD11-B49B3B089D16}" = CCC Help Danish
"{7E60A32D-7AD9-7CF6-1378-2FBCDBB37E71}" = Transformice
"{7F71FDE8-7D81-4faa-8B6A-A792375813EB}" = J4660
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{85076DFF-7A17-3566-9CC0-488E6E6D4494}" = Microsoft Visual Web Developer 2010 Express - ENU
"{86CE1746-9EFF-3C9C-8755-81EA8903AC34}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{877B76B2-F83F-4F5A-B28D-3F398641ADB6}" = Microsoft SQL Server System CLR Types
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8B9F50F9-BA6F-47c5-990B-76A74A1C68B0}" = 4500G510af
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FF3891F-01B5-4A71-BFCD-20761890471C}" = Windows Live Messenger
"{92A51949-EE4C-466D-AAF0-99E74A49A63F}" = DocMgr
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{95716cce-fc71-413f-8ad5-56c2892d4b3a}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
"{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth
"{9739158D-EDED-D628-9865-1460B5A7FAE3}" = CCC Help Portuguese
"{9809124C-0C4C-2367-7889-1E16D8EF1AAF}" = CCC Help Chinese Standard
"{9866E5F0-121F-E018-E2D1-2E1770847ABF}" = Adobe Download Assistant
"{99A016E1-0840-43AE-8434-A18CEDFA833B}" = LogMeIn Hamachi
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C1BB613-F398-49B7-B346-5DEBA8ABBF38}" = FINAL FANTASY XIV - A Realm Reborn (Beta Version)
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}" = Browser Configuration Utility
"{A3D4A048-7012-4255-A800-D392DD0BE7C2}_is1" = Sleeping Dogs Limited Edition version Repack by FMETAL333
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A6E1EE9D-01DD-82FD-BDBC-193BCEF9FD5C}" = CCC Help Greek
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB13F192-49FC-A065-F15C-746B10CC43C8}" = CCC Help Japanese
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.05)
"{ACE28263-76A4-4BF5-B6F4-8BD719595969}" = Microsoft SQL Server Database Publishing Wizard 1.4
"{AE548812-D611-608D-61C6-7E40F28573A2}" = CCC Help Russian
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B4E343DD-BAAB-4D59-AD9C-DEA0AFE09DF1}" = Mumble 1.2.3
"{B531E735-8ED5-4270-ACCE-3809086FBD02}_is1" = Batman Arkham City version 1.0
"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}" = DarksidersInstaller
"{BC63AEF9-1367-9F7C-5926-52E56450EDCD}" = CCC Help Spanish
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{C0A7E4F3-82CC-416B-82C6-BA06AACFD635}_is1" = Auto Clicker v1.1
"{C175D5B0-ED04-42C9-B23F-D8BD406173E7}" = 4500_G510af_Help
"{C1E2D27F-B363-588E-8859-9EF7F4EBF418}" = CCC Help Chinese Traditional
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}" = GTA San Andreas
"{D4329609-4102-4F8C-B83F-7FE024EEA314}" = Dead Space™ 3
"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D76AC809-CCC1-6198-4970-A63FA5CF7DCB}" = CCC Help Swedish
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}" = WCF RIA Services V1.0 SP1
"{DA675EE2-4C04-9699-0EE2-7EF9FE7AB870}" = CCC Help German
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{DC635845-46D3-404B-BCB1-FC4A91091AFA}" = SmartWebPrinting
"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources
"{E06F7C95-4D68-63D9-2231-AA5F8E186FCB}" = CCC Help English
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E21A8F3C-1ACB-46B1-CE72-E9CF09549DED}" = Catalyst Control Center Localization All
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E2F52AC2-B925-C18F-E1AE-42FBD46ECAC7}" = CCC Help Czech
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E649AC39-69C0-C6FE-0A54-4752DB5D1FD2}" = Catalyst Control Center Graphics Previews Common
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E7D4E834-93EB-351F-B8FB-82CDAE623003}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}" = Adobe Creative Suite 6 Master Collection
"{E9463114-898C-7C2A-2C47-E9ABC63F5D43}" = CCC Help Finnish
"{EA2DB6E0-72C5-4ef9-A3A0-E6705F4A6A9E}" = Nexon Game Manager
"{ED780CA9-0687-3C12-B439-3369F224941F}" = Microsoft Visual Studio 2010 Service Pack 1
"{EFBE6DD5-B224-96E5-72B9-68D328CB12A6}" = Adobe Widget Browser
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F4EAEBEA-3E46-43b8-A63C-AD180AE86918}" = BPDSoftware
"{FD869F35-AEBD-4AEB-90FB-8C1288AD40F6}_is1" = Arcane Worlds DEMO version 0.09
"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials
"{FF10AC4D-3349-99DA-3E58-5197CEA1D833}" = CCC Help Italian
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFEC93FF-C162-C0C3-B5E7-01214B0E5F2D}" = CCC Help Turkish
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe AIR" = Adobe AIR
"Adobe Digital Editions 2.0" = Adobe Digital Editions 2.0
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"Akamai" = Akamai NetSession Interface Service
"aTube Catcher" = aTube Catcher
"Battlelog Web Plugins" = Battlelog Web Plugins
"BioShock Infinite_is1" = BioShock Infinite
"BitTorrent" = BitTorrent
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"Cobalt" = Cobalt
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download Assistant
"com.adobe.WidgetBrowser" = Adobe Widget Browser
"DAEMON Tools Lite" = DAEMON Tools Lite
"Dishonored_is1" = Dishonored
"DivX Setup" = DivX Setup
"EdenEternal" = EdenEternal
"ESN Sonar-0.70.4" = ESN Sonar
"FlashDevelop" = FlashDevelop 4.0.4
"Fraps" = Fraps
"GFWL_{4E4D0FA1-F880-4CCB-999A-501000008200}" = Dark Souls Prepare to Die Edition
"Google Chrome" = Google Chrome
"HunterBlade" = HunterBlade 0.050413
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"Kingdoms of Amalur Reckoning_is1" = Kingdoms of Amalur Reckoning
"LogMeIn Hamachi" = LogMeIn Hamachi
"Makehuman" = Makehuman
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"MapleStory" = MapleStory
"MediaMonkey Script: MiniLyrics Embedder v1.4b_is1" = MediaMonkey Script: MiniLyrics Embedder v1.4b
"MediaMonkey_is1" = MediaMonkey 4.0
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"Microsoft Visual C++ 2010 Express - ENU" = Microsoft Visual C++ 2010 Express - ENU
"Microsoft Visual Studio 2010 Service Pack 1" = Microsoft Visual Studio 2010 Service Pack 1
"Microsoft Visual Web Developer 2010 Express - ENU" = Microsoft Visual Web Developer 2010 Express - ENU
"MiniLyrics" = Minilyrics(remove only)
"OpenAL" = OpenAL
"Origin" = Origin
"pcsx2-r4600" = PCSX2 - Playstation 2 Emulator
"PPÖúÊÖ PC°æ" = PPÖúÊÖ PC°æ 1.0.6.6
"PunkBusterSvc" = PunkBuster Services
"Rainmeter" = Rainmeter
"RocketDock_is1" = RocketDock 1.3.5
"SpeedFan" = SpeedFan (remove only)
"Steam App 10" = Counter-Strike
"Steam App 100" = Counter-Strike: Condition Zero Deleted Scenes
"Steam App 104700" = Super Monday Night Combat
"Steam App 105600" = Terraria
"Steam App 107100" = Bastion
"Steam App 108600" = Project Zomboid
"Steam App 108800" = Crysis 2 Maximum Edition
"Steam App 113420" = Fallen Earth
"Steam App 1250" = Killing Floor
"Steam App 12900" = Audiosurf
"Steam App 17410" = Mirror's Edge
"Steam App 17460" = Mass Effect
"Steam App 17470" = Dead Space
"Steam App 17500" = Zombie Panic Source
"Steam App 200210" = Realm of the Mad God
"Steam App 200390" = Oil Rush
"Steam App 200710" = Torchlight II
"Steam App 203810" = Dear Esther
"Steam App 204060" = Superbrothers: Sword & Sworcery EP
"Steam App 204300" = Awesomenauts
"Steam App 205790" = Dota 2 Test
"Steam App 205910" = Tiny and Big: Grandpa's Leftovers
"Steam App 207610" = The Walking Dead
"Steam App 209830" = Lone Survivor
"Steam App 214970" = Intrusion 2
"Steam App 215" = Source SDK Base 2006
"Steam App 218230" = PlanetSide 2
"Steam App 219150" = Hotline Miami
"Steam App 219680" = Proteus
"Steam App 220780" = Thomas Was Alone
"Steam App 221260" = Little Inferno
"Steam App 223710" = Cry of Fear
"Steam App 225260" = Brütal Legend
"Steam App 231410" = Kerbal Space Program Demo
"Steam App 240" = Counter-Strike: Source
"Steam App 24240" = PAYDAY: The Heist
"Steam App 24740" = Burnout Paradise: The Ultimate Box
"Steam App 24980" = Mass Effect 2
"Steam App 260" = Counter-Strike: Source Beta
"Steam App 26800" = Braid
"Steam App 30" = Day of Defeat
"Steam App 33910" = ARMA 2
"Steam App 33930" = ARMA 2: Operation Arrowhead
"Steam App 340" = Half-Life 2: Lost Coast
"Steam App 3830" = Psychonauts
"Steam App 40" = Deathmatch Classic
"Steam App 4000" = Garry's Mod
"Steam App 40800" = Super Meat Boy
"Steam App 40810" = Super Meat Boy Editor
"Steam App 41500" = Torchlight
"Steam App 42910" = Magicka
"Steam App 4540" = Titan Quest
"Steam App 4570" = Warhammer 40,000: Dawn of War - Game of the Year Edition
"Steam App 47790" = Medal of Honor™ Single Player
"Steam App 47830" = Medal of Honor™ Multiplayer
"Steam App 47890" = The Sims™ 3
"Steam App 48000" = LIMBO
"Steam App 48700" = Mount & Blade: Warband
"Steam App 49520" = Borderlands 2
"Steam App 50620" = Darksiders
"Steam App 55110" = Red Faction: Armageddon
"Steam App 55230" = Saints Row: The Third
"Steam App 570" = Dota 2
"Steam App 57300" = Amnesia: The Dark Descent
"Steam App 60" = Ricochet
"Steam App 620" = Portal 2
"Steam App 644" = Portal 2 Publishing Tool
"Steam App 80" = Counter-Strike: Condition Zero
"Steam App 8980" = Borderlands
"Steam App 91700" = E.Y.E: Divine Cybermancy
"Steam App 95300" = Capsized
"Steam App 99900" = Spiral Knights
"StepMania 5" = StepMania v5.0 alpha 3 (remove only)
"SuperHideIP" = Super Hide IP
"Sweet Home 3D_is1" = Sweet Home 3D version 4.1
"Transformice" = Transformice
"TrueCrypt" = TrueCrypt
"Unity" = Unity
"ViewpointMediaPlayer" = Viewpoint Media Player
"VLC media player" = VLC media player 2.0.5
"WinLiveSuite" = Windows Live Essentials
"Xfire" = Xfire (remove only)

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-601339211-1191364849-2417053759-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Akamai" = Akamai NetSession Interface
"Flux" = F.lux
"HappyCloud" = Happy Cloud Client
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"teraenmasse" = TERA
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 10/15/2013 11:52:35 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 12028

Error - 10/15/2013 11:52:36 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 10/15/2013 11:52:36 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 13026

Error - 10/15/2013 11:52:36 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 13026

Error - 10/15/2013 11:52:37 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 10/15/2013 11:52:37 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 14024

Error - 10/15/2013 11:52:37 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 14024

Error - 10/15/2013 11:52:38 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second

Error - 10/15/2013 11:52:38 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 15023

Error - 10/15/2013 11:52:38 PM | Computer Name = Usuario-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 15023

[ System Events ]
Error - 10/14/2013 7:34:20 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7023
Description = The Akamai NetSession Interface service terminated with the following
error: %%126

Error - 10/14/2013 7:34:36 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7000
Description = The LogMeIn Kernel Information Provider service failed to start due
to the following error: %%3

Error - 10/14/2013 7:35:38 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the LogMeIn
Hamachi Tunneling Engine service to connect.

Error - 10/14/2013 7:35:38 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7000
Description = The LogMeIn Hamachi Tunneling Engine service failed to start due to
the following error: %%1053

Error - 10/15/2013 2:43:03 PM | Computer Name = Usuario-PC | Source = EventLog | ID = 6008
Description = The previous system shutdown at 03:40:23 p.m. on ?15/?10/?2013 was
unexpected.

Error - 10/15/2013 2:43:31 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7023
Description = The Akamai NetSession Interface service terminated with the following
error: %%126

Error - 10/15/2013 2:43:53 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7000
Description = The LogMeIn Kernel Information Provider service failed to start due
to the following error: %%3

Error - 10/15/2013 2:45:03 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7009
Description = A timeout was reached (30000 milliseconds) while waiting for the LogMeIn
Hamachi Tunneling Engine service to connect.

Error - 10/15/2013 2:45:03 PM | Computer Name = Usuario-PC | Source = Service Control Manager | ID = 7000
Description = The LogMeIn Hamachi Tunneling Engine service failed to start due to
the following error: %%1053

Error - 10/16/2013 12:47:18 PM | Computer Name = Usuario-PC | Source = DCOM | ID = 10010
Description =


< End of report >

Again, sorry for the delay!
Micaso

[DonnaB]

That's fine Micaso. Thanks for letting me know.

ESET may have left a log in the following location if the scan had finished:

C:\Program Files\ESET\EsetOnlineScanner\log.txt

Otherwise, please do post the log at your convenience.

[Micaso]

DonnaB,

ESET has done it again! I wake up, go straight to my computer to check on the results and the first thing I (oddly) see is a f.lux website displaying what the newest updates are, and an internet explorer website for ESET, showing the first steps of starting the scan from the start. Could it be that ESET or something is causing resets to my computer when it finishes scanning or something of the sorts? The same thing happened to me two days ago where I had left for a couple of hours because it was taking too long and when I came back I lost all my browser windows because of a possible reset. The only thing I could find on the route specified for the ESET logs is this:

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK


Which I doubt is a complete log. I'm at a loss.

Micaso

[DonnaB]

Micaso,

I see that f.lux is installed on your computer. Do you recall installing the f.lux program and configuring it to update automatically? f.lux is a program that was designed to adjust the computer display's color temperature and to reduce eye strain during night time usage according to the location and time of day. If so, please allow it to update. If not, you can uninstall via Start > Control Panel > Programs and Features.

As for the ESET log, it appears that no threats were found.

It appears that the older version of Java were not removed. Let's try the Java Removal Tool to see if we have any success. You will be asked to install an applet to check for and remove the old versions. It will leave the most current version intact. If you do not have the most current version installed, you will be asked to install it.

I see that IE is outdated at version 9. You should have IE10 installed on your W7 even if you do not use IE. Please go to Windows Updates and check for updates. If you have any failures, please let me know so we can correct that.

Donna

[Micaso]

DonnaB,

I was able to manually uninstall Java 6 Update 45! The java removal tool didn't work, so I uninstalled through Programs and Features. I also checked for updates using Windows Updates and no updates were found. I investigated and when I look at the "about" section in Internet Explorer, the version appears as 10.0.9200.16721. Could OTL be wrong?

[DonnaB]

Hm? Strange. Otl must be wrong. I rechecked the SecurityCheck log here and found that IE is updated to IE10.

Your logs look clean as a whistle!

I'd like to point out that there has been talk lately that MSE is not the AV that it once was expected to be. If you decide to replace MSE with another AV, I would recommend Avast8 after uninstalling MSE via Programs and Features.

How has your system been running? Any questions?

Donna

[Micaso]

System has been running fine, no problems. I'm kind of worried about not using Online Armor anymore, though. And what's this about MSE? Should I be worried about that?

[DonnaB]

System has been running fine, no problems.

Great! That's what I was hoping to hear.

I'm kind of worried about not using Online Armor anymore, though. And what's this about MSE? Should I be worried about that?

Concerning MSE; An article was written about MSE where the journalist had paraphrased comments made by an MS Associate. I had my worries since I do recommend MSE to many clients, though after further research and discussions with those close to the source at MS, whose comments were twisted, I have come to the conclusion that I will continue to recommend MSE. You can read more about that here.

I also spoke with a friend who is employed by Emsisoft, the developers of Online Armor Firewall, and have been assured that there was quite a bit of bug-fixing done in the latest release. If you feel more confidant with Online Armor as your firewall, I would suggest reinstalling the latest version from here. Online Armor should disable the Windows Firewall by default, though double check to make sure your Windows Firewall is disabled to prevent conflict. You should be able to use your valid Emsisoft Online Armor license.

Do that and let me know how it goes before we clean up our tools and I send you on your way.

Donna

[Micaso]

I'm gonna put off on installing Online Armor for now. So far my system has been fine without it (and I didn't need to authorize every single little thing!). It's more comfortable, I guess. Thing is, should I install another firewall or keep the windows default firewall?

Thanks!
Micaso

[DonnaB]

I would personally keep the windows firewall. The only time I would insist anyone to install a 3rd party firewall is if they had Windows XP installed or their computer is used for business purposes. If you are a safe computer user then you have nothing to fear.

Before we uninstall our tools, go to Start and type in Windows Updates. Click on Windows Updates in the list, then in the left panel, click on Check for updates. I see that IE9is presently installed on your system. You should be at IE10 even if you don't use IE as your primary browser. Up to date software is very important to prevent infection. I use a program called Update Checker. It audits your software and provides a legit link to update that needs it.

After you check for updates, open IE and click on Help in the menu bar. From the drop down list, click on About Internet Explorer. It should display IE10. You can also check with in WU's to verify that IE10 has installed.

Let me know of you have any trouble, or failures.

[Micaso]

That's what I had done when you said I had IE9 installed. OTL must have hiccuped because when I checked in "About Internet Explorer" it appeared as IE10. The exact version is 10.0.9200.16721, if it changes anything.

Micaso

EDIT: Also, windows update found no new updates.

Edited by Micaso, 22 October 2013 - 12:06 PM.

[DonnaB]

I think it was my brain that hiccuped! Working long hours/days and little sleep all week seems to have turned the 'ol brain into oatmeal!

You're clean and ready to go conquer the world (or your favorite game).

Let's remove those tools.

OTL Clean-Up

Please click on the on your desktop to open the main window.

Next click on the button.

Once clean up is complete you will be prompted to reboot your computer. Please do so.

This will remove most of the programs we have used including itself.

Go to Start > Control Panel > Programs and Features annd look for ESET Online Scanner. Right click and uninstall.

For SecurityCheck and JavaRa right click on the desktop icon and delete.

If there are any left over tools or logs on your computer please delete them now.

Leave Malwarebytes Antimalware installed and be sure to allow to update before scanning.

Next:

Clear Restore Points

Go Start > All Programmes > Accessories > System tools
Right click Disc Cleanup and select run as administrator
When it pops up at the first prompt select OK after it has done some calculations the tabs will appear
Select More Options tab
Press Sytem Restore and Shadow Copies Cleanup button


Click on Start, right click on Computer. Navigate to Properties in the list.
Next click on the System Protection link in the left pane.
The System Properties dialog screen opens up and you will want to click on Create.
Type in a description for the restore point which will help you remember the point at which is was created.

See link if you have any trouble > How to manually Create a Restore Point

And finally! Some more of my very own tips for safe computing:

• Make sure Realtime AV scanning is enabled. A Firewall is a definite plus.Windows Firewall in Vista, W7 and W8 are great though for Windows XP I would suggest a 3rd party firewall such as Online Armor (which is not free) or Comodo free firewall.
• If you can't afford a cost effective virus protection then use some free online tools.
• Don't trust pop-ups that tell you that you may have spyware on your machine. Most of these are money making schemes designed to get you to buy their removal product, which in some cases also contain malware.
• Make back-ups of your most personal files frequently by whatever means you have available, i.e. Tape, CD, DVD, USB Drives, Ghost programs, etc. You never know when you'll have to reformat and start from scratch and without current backups of your personal files, you're basically at a lose. You can always reformat and reinstall programs, but you cannot replace your data if you haven't made backups.
• Be careful where you "surf". If you know you are going to click a site that is questionable, then at least be intelligent enough to disable javascript, java, ActiveX installations, etc... You "surf" these sites at your own risk.
• Uninstall and quit using P2P networking programs like uTorrent, Kazaa, BearShare, eMule and Limewire. These are your most likely weakest links if you're using them. Primarily most stuff transferred is illegally obtained and if you won't give it up you eventually pay the consequences.
• Don't give access to your computer to friends or family who appear to be clueless about what they are doing. Otherwise you'll come home from school/work one day and your computer will be trashed.
• In my opinion, a PC is just that, a PC (Personal Computer). Don't allow your children to talk you into any Windows cracks, hacks, or tweaks that could turn your computer into an expensive doorstop.
• When in doubt -- don't download it and don't install it until you've researched it.

Here are a few links you might find interesting that will educate and enhance your online surfing abilities:

"So how did I get infected in the first place?" by Tony Klein and updated by Corrine
How Malware Spreads - How did I get infected by quietman7
How to prevent Malware: by miekemoes

If you have any questions or concerns please don't hesitate to ask! Any member on this site will be more then happy to guide you in your quest for safe surfing and to prevent infection.

Happy and safe computing!

Donna