Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Computer wont back up, will not install updates and more!


  • Please log in to reply

#1
ElevatedMinds

ElevatedMinds

    Member

  • Member
  • PipPip
  • 40 posts
The problems I am having:
  • Computer Will Not Allow Windows Updates
  • Computer will not back up.
  • Computer shuts down very, very slowly.
  • Multiple crashes across all programs, daily.
  • Computer takes a long time during windows boot screen.
  • Computer will not recognize or not read attached external HD which is only a few months old.
  • As of 4pm EST, 11/3/13, the computer will only come out of the boot screen after multiple hard resets. It will also not allow me to update and antivirus definitions.

I have, unfortunately for me (nothing against you guys, site and people here are amazing!), been here once before. As can be seen here Previous thread at Geekstogo.com

Any help would be greatly appreciated. I know there are plenty of "essential" windows updates that need to be installed and unfortunately, I cant seem to figure out why it will not let me do the things that I have listed above.

Thanks in advance for your time.

Here is the OTL Quick scan that I have done as of this morning.
OTL logfile created on: 11/3/2013 7:37:01 AM - Run 5
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Attila\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.25 Gb Total Physical Memory | 1.58 Gb Available Physical Memory | 48.59% Memory free
6.73 Gb Paging File | 4.65 Gb Available in Paging File | 69.13% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 288.03 Gb Total Space | 51.70 Gb Free Space | 17.95% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 3.90 Gb Free Space | 38.98% Space Free | Partition Type: NTFS
Drive F: | 1397.26 Gb Total Space | 654.60 Gb Free Space | 46.85% Space Free | Partition Type: NTFS

Computer Name: ATTILA-PC | User Name: Attila | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/11/03 07:34:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
PRC - [2013/09/30 21:01:20 | 000,274,840 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/07/18 15:49:42 | 000,312,512 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MpCmdRun.exe
PRC - [2013/07/18 15:49:42 | 000,295,376 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2013/07/18 15:49:42 | 000,022,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/07/18 15:49:24 | 000,995,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2013/06/11 13:00:16 | 001,855,880 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
PRC - [2013/05/15 11:08:44 | 001,435,984 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/04/04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2013/04/04 13:50:32 | 000,532,040 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2013/04/04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
PRC - [2013/02/12 21:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2013/02/11 15:15:46 | 001,243,024 | ---- | M] (Binary Fortress Software) -- C:\Program Files\DisplayFusion\DisplayFusionService.exe
PRC - [2013/02/11 15:15:36 | 007,203,712 | ---- | M] (Binary Fortress Software) -- C:\Program Files\DisplayFusion\DisplayFusion.exe
PRC - [2013/02/05 10:48:44 | 000,272,248 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe
PRC - [2013/01/16 13:47:30 | 000,026,456 | ---- | M] (Uniblue Systems Ltd) -- C:\Program Files\Uniblue\DriverScanner\dsmonitor.exe
PRC - [2012/12/19 14:56:24 | 000,482,304 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012/12/19 14:55:48 | 000,219,136 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012/05/15 11:54:32 | 000,276,872 | ---- | M] (http://tortoisesvn.net) -- C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
PRC - [2011/11/23 08:17:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2011/09/29 11:16:26 | 000,101,144 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\LCore.exe
PRC - [2011/05/16 11:30:06 | 000,887,712 | ---- | M] (Razer USA Ltd) -- C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe
PRC - [2010/12/08 12:11:32 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2010/04/30 21:47:47 | 002,938,552 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2009/05/21 10:13:58 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/05/01 13:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2009/05/01 13:35:10 | 000,185,640 | ---- | M] (Seagate LLC) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
PRC - [2009/04/11 01:28:15 | 000,117,248 | ---- | M] () -- \\?\C:\Windows\System32\wbem\WMIADAP.EXE
PRC - [2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/08/14 01:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe
PRC - [2008/02/26 11:57:28 | 000,128,296 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2008/02/01 00:20:22 | 004,706,304 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/09/12 10:52:18 | 000,172,032 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razerhid.exe
PRC - [2007/08/28 09:32:24 | 000,143,360 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razertra.exe
PRC - [2007/08/16 16:05:16 | 000,274,432 | ---- | M] (razercfg MFC Application) -- C:\Program Files\Razer\Lachesis\OSD.exe
PRC - [2007/06/05 09:37:12 | 000,163,840 | ---- | M] (Razer Inc.) -- C:\Program Files\Razer\Lachesis\razerofa.exe


========== Modules (No Company Name) ==========

MOD - [2013/09/30 21:01:19 | 003,279,768 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013/08/22 14:37:04 | 000,078,240 | ---- | M] () -- C:\Program Files\Overwolf\OWExplorer-2006.dll
MOD - [2013/06/20 20:28:45 | 012,156,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\de0d1e23b3de6010d4608db3dc59f337\System.Web.ni.dll
MOD - [2013/06/20 20:28:35 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\fbc70df7b07a2e9a7b59d26cb4e3b610\System.Runtime.Remoting.ni.dll
MOD - [2013/06/16 11:28:58 | 016,033,160 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll
MOD - [2013/05/16 02:34:52 | 000,686,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\2bc38488f9988db801a844e2590294a3\System.Security.ni.dll
MOD - [2013/05/16 02:34:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3da65115bf9debbf564861f6b123a2e4\System.Configuration.ni.dll
MOD - [2013/05/16 02:32:07 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e9ea3e70247b4aa4a8b260426db3aa6b\System.Windows.Forms.ni.dll
MOD - [2013/05/16 02:09:39 | 018,002,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a9594959e951127f16eb49644ba92f79\PresentationFramework.ni.dll
MOD - [2013/05/16 02:09:24 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\7cfbbd029ef945fbcdaedd24b2b67a24\PresentationCore.ni.dll
MOD - [2013/05/16 02:09:20 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dll
MOD - [2013/05/16 02:09:15 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dll
MOD - [2013/05/16 02:09:12 | 003,858,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\af18b8a8f56494da44cc448f3b9704a5\WindowsBase.ni.dll
MOD - [2013/05/16 02:09:08 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\233661f3a2b632e9553915c8639637d0\System.Configuration.ni.dll
MOD - [2013/02/13 04:12:01 | 000,253,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\ba39e27ea796912fce296963622dfbae\WindowsFormsIntegration.ni.dll
MOD - [2013/02/13 04:03:51 | 011,820,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\421cb77e6a4c21f94e3c5ddf766de23b\System.Web.ni.dll
MOD - [2013/02/12 21:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013/02/12 21:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2013/01/10 03:42:14 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\f042f66c2ad8fd5b8c34fa22cd22079e\System.Management.ni.dll
MOD - [2013/01/10 03:36:08 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\b757806657fa5db2b1ed1a89b026b463\System.Xml.ni.dll
MOD - [2013/01/10 03:35:46 | 001,593,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\78157a494dc9a7e52be8840decfcd9cc\System.Drawing.ni.dll
MOD - [2013/01/10 03:34:56 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\cc149d08e75f8c53cd28ac926b38c370\System.ni.dll
MOD - [2013/01/10 03:34:46 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2227d1559f87943255069398608d5c56\mscorlib.ni.dll
MOD - [2013/01/10 03:18:10 | 000,096,768 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\a1b65a602c75409c0c1ce7fa1f2a0983\UIAutomationProvider.ni.dll
MOD - [2013/01/10 03:17:22 | 001,801,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\866894ebe5258bf9f45d6b063229e990\System.Xaml.ni.dll
MOD - [2013/01/10 03:09:35 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\dfeff31ab1e7cd3480c8942290c92f5d\PresentationFramework.Aero.ni.dll
MOD - [2013/01/10 03:09:30 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\43cd41484df96d15df949eb17dd88152\System.Xml.ni.dll
MOD - [2013/01/10 03:09:27 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll
MOD - [2013/01/10 03:09:25 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll
MOD - [2013/01/10 03:09:18 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll
MOD - [2012/12/19 14:30:26 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
MOD - [2012/05/15 11:54:16 | 000,070,536 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\libsasl32.dll
MOD - [2011/12/19 20:37:19 | 000,026,112 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\PnpGamePanelDevices-8.12.049\PnpGamePanelDevices.dll
MOD - [2011/12/19 20:37:18 | 000,070,656 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\SimInput-8.12.068\SimInput.dll
MOD - [2011/12/19 20:37:16 | 000,467,456 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\MainUI-8.12.179\MainUI.dll
MOD - [2011/12/19 20:37:09 | 000,206,336 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\G19Device-8.12.147\G19Device.dll
MOD - [2011/12/19 20:37:09 | 000,189,952 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\G13Device-8.12.155\G13Device.dll
MOD - [2011/12/19 20:37:07 | 000,086,016 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevMgr-8.12.077\DevMgr.dll
MOD - [2011/12/19 20:37:06 | 000,090,112 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevBusHid-8.12.078\DevBusHid.dll
MOD - [2011/12/19 20:37:06 | 000,088,064 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevBusBulk-8.12.076\DevBusBulk.dll
MOD - [2010/04/30 21:47:47 | 002,938,552 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
MOD - [2007/09/12 10:52:18 | 000,172,032 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razerhid.exe
MOD - [2007/08/28 09:32:24 | 000,143,360 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razertra.exe


========== Services (SafeList) ==========

SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - [2013/10/30 14:25:56 | 000,566,696 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013/09/30 21:01:19 | 000,118,680 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/08/22 14:37:02 | 000,018,360 | ---- | M] (Overwolf Ltd) [On_Demand | Stopped] -- C:\Program Files\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
SRV - [2013/07/18 15:49:42 | 000,295,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013/07/18 15:49:42 | 000,022,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2013/06/16 11:29:00 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/15 11:08:44 | 001,435,984 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/02/11 21:57:36 | 000,049,152 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2013/02/11 15:15:46 | 001,243,024 | ---- | M] (Binary Fortress Software) [Auto | Running] -- C:\Program Files\DisplayFusion\DisplayFusionService.exe -- (DisplayFusionService)
SRV - [2013/02/05 10:48:00 | 000,235,216 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\3.0.318\McCHSvc.exe -- (McComponentHostService)
SRV - [2012/12/19 14:55:48 | 000,219,136 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012/07/13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/11/23 08:17:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV - [2011/04/27 17:41:54 | 000,136,584 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\ramaint.exe -- (LMIMaint)
SRV - [2011/04/27 17:41:50 | 000,390,528 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2010/12/08 12:11:32 | 000,374,152 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2010/06/25 12:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2009/10/23 11:31:44 | 000,401,920 | ---- | M] (Amazon.com) [On_Demand | Stopped] -- C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe -- (Amazon Download Agent)
SRV - [2009/05/01 13:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2008/08/14 01:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter)
SRV - [2008/01/20 21:21:41 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2013/11/03 07:31:54 | 000,040,392 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{36D062CD-3104-4303-AA0E-7C9C23F4F1B4}\MpKslc7a19bbe.sys -- (MpKslc7a19bbe)
DRV - [2013/06/18 20:50:08 | 000,107,392 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2013/04/04 13:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012/12/19 14:32:06 | 000,442,368 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012/11/29 14:54:54 | 000,042,592 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\libusb0.sys -- (libusb0)
DRV - [2012/09/02 17:03:50 | 000,125,824 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV - [2012/02/23 07:31:36 | 000,083,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2011/12/19 20:37:18 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2011/12/19 20:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2011/12/19 20:37:05 | 000,378,568 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ladfGSCi386.sys -- (LADF_CaptureOnly)
DRV - [2011/12/19 20:37:05 | 000,317,384 | ---- | M] (Logitech) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ladfGSRi386.sys -- (LADF_RenderOnly)
DRV - [2011/05/12 16:59:46 | 000,124,672 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RzSynapse.sys -- (RzSynapse)
DRV - [2011/04/27 17:41:47 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2010/06/25 12:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2009/05/28 10:07:14 | 000,334,992 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfSBVMi386.sys -- (LADF_SBVM)
DRV - [2009/05/28 10:07:14 | 000,053,520 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfDHP2i386.sys -- (LADF_DHP2)
DRV - [2009/03/18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/08/11 12:41:00 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008/08/11 12:41:00 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2008/03/07 00:46:56 | 000,027,648 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\RtNdPt60.sys -- (RtNdPt60)
DRV - [2008/02/02 23:50:06 | 000,106,496 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008/01/20 21:21:33 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2007/08/08 10:04:16 | 000,012,032 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Lachesis.sys -- (LachesisFltr)
DRV - [2006/11/02 02:30:56 | 000,047,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}: "URL" = http://slirsredirect...hromesbox-en-us
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...ie7&rlz=1I7DKUS

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}: "URL" = http://slirsredirect...hromesbox-en-us
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com"
FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.172
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131030
FF - prefs.js..extensions.enabledAddons: djziggy%40gmail.com:2.1.1
FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.608
FF - prefs.js..extensions.enabledItems: [email protected]:7
FF - prefs.js..extensions.enabledItems: {8ed952a0-199c-11d9-9669-0800200c9a66}:1.5.3
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.3.0: C:\Program Files\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Attila\AppData\Roaming\Move Networks\plugins\npqmp071503000010.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Attila\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013/03/24 17:17:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/05/21 20:54:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 24.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/07/13 14:23:59 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\Attila\AppData\Roaming\Move Networks [2009/11/03 20:05:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}: C:\Users\Attila\Program Files\DNA

[2009/03/16 20:14:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Extensions
[2009/03/16 20:14:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Extensions\[email protected]
[2013/10/31 20:07:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions
[2010/06/28 19:51:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/02/20 18:22:45 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}(235)
[2010/03/09 00:26:11 | 000,000,000 | ---D | M] ("Unlinker") -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{8ed952a0-199c-11d9-9669-0800200c9a66}
[2013/10/31 20:07:05 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013/09/27 18:18:07 | 000,000,000 | ---D | M] (LavaFox V2-Blue) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/09/27 16:03:25 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2011/03/07 21:17:25 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/09/27 16:03:26 | 000,000,000 | ---D | M] (LavaFox V2-Green) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/10/24 18:44:34 | 002,737,915 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/08/02 20:06:05 | 000,224,035 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2013/10/09 16:00:51 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2009/12/20 13:21:58 | 000,004,546 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search-1.xml
[2009/10/09 09:56:20 | 000,004,207 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search.xml
[2013/05/21 20:54:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/05/21 20:53:26 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2013/05/21 20:53:26 | 000,000,000 | ---D | M] (InfoAtoms) -- C:\Program Files\Mozilla Firefox\extensions\[email protected]
[2013/05/21 20:54:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/09/30 21:01:20 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/03/24 17:17:46 | 000,000,000 | ---D | M] (No name found) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2007/04/16 12:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npViewpoint.dll
[2011/05/12 05:47:24 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml.old

O1 HOSTS File: ([2013/06/22 06:43:00 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O4 - HKLM..\Run: [AmazonGSDownloaderTray] C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe (Amazon.com)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Razer Blackwidow Driver] C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe (Razer USA Ltd)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [DisplayFusion] C:\Program Files\DisplayFusion\DisplayFusion.exe (Binary Fortress Software)
O4 - HKCU..\Run: [EADM] C:\Program Files\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Overwolf] C:\Program Files\Overwolf\Overwolf.exe (Overwolf)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launch Jawbone Updater.lnk = C:\Program Files\Jawbone\LaunchJU.exe ()
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 167.206.254.1 167.206.254.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C2F540FB-26F5-4DB6-8E0A-2F17E1778D36}: DhcpNameServer = 167.206.254.1 167.206.254.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C497BC71-2AD7-4650-A3C8-8D0A38E6AA43}: DhcpNameServer = 167.206.254.2 167.206.254.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~3\GOOGLEDESKTOPNETWORK3.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~3\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Attila\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Attila\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013/06/22 07:00:31 | 000,000,067 | ---- | M] () - F:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2013/11/03 07:34:43 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
[2013/11/03 03:36:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Overwolf
[2013/10/16 18:40:53 | 016,090,616 | ---- | C] (SmartSoft Ltd) -- C:\Users\Attila\Desktop\SFTPMSI.exe
[2013/10/10 07:51:00 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\stalker-shoc
[2013/10/07 10:34:43 | 000,000,000 | ---D | C] -- C:\Users\Attila\Desktop\Tweaking.com - Windows Repair
[2013/10/07 08:48:57 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2013/10/07 08:29:59 | 000,000,000 | ---D | C] -- C:\Users\Attila\AppData\Local\ESN
[2013/10/06 20:57:51 | 000,000,000 | ---D | C] -- C:\Users\Attila\AppData\Roaming\iSpy
[2013/10/06 20:57:26 | 000,000,000 | ---D | C] -- C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iSpy
[2013/10/06 20:57:21 | 000,000,000 | ---D | C] -- C:\Program Files\iSpy
[2013/10/04 21:45:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 4™ Beta
[2013/10/04 21:45:38 | 000,000,000 | -H-D | C] -- C:\Program Files\Common Files\EAInstaller
[2013/10/04 21:45:33 | 000,000,000 | ---D | C] -- C:\Program Files\Battlelog Web Plugins

========== Files - Modified Within 30 Days ==========

[2013/11/03 07:36:53 | 000,649,260 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/11/03 07:36:53 | 000,122,770 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/11/03 07:34:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
[2013/11/03 07:30:59 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/11/03 07:30:57 | 000,000,330 | ---- | M] () -- C:\Windows\tasks\dsmonitor.job
[2013/11/03 07:30:45 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/11/03 07:30:45 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/11/03 07:30:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/11/03 07:30:23 | 3487,748,096 | -HS- | M] () -- C:\hiberfil.sys
[2013/11/03 03:18:00 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/11/03 03:00:15 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/11/02 12:10:00 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2013/10/27 19:46:08 | 000,000,008 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_highscore.dat
[2013/10/27 19:46:01 | 000,000,212 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_profiles_data.dat
[2013/10/16 18:41:03 | 016,090,616 | ---- | M] (SmartSoft Ltd) -- C:\Users\Attila\Desktop\SFTPMSI.exe
[2013/10/15 18:22:06 | 000,157,606 | -H-- | M] () -- C:\Windows\MEMORY.DMP
[2013/10/10 15:37:11 | 000,000,414 | ---- | M] () -- C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
[2013/10/10 14:51:44 | 392,956,213 | ---- | M] () -- C:\Users\Attila\Desktop\7DaystoDie(1).zip
[2013/10/08 08:54:45 | 000,002,437 | ---- | M] () -- C:\Users\Attila\Desktop\iSpy.lnk
[2013/10/07 11:56:11 | 000,000,940 | ---- | M] () -- C:\Users\Attila\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2013/10/07 10:33:57 | 003,268,460 | ---- | M] () -- C:\Users\Attila\Desktop\tweaking.com_windows_repair_aio.zip
[2013/10/07 08:49:26 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013/10/05 18:04:57 | 000,076,509 | ---- | M] () -- C:\Users\Attila\Desktop\Sign.jpg
[2013/10/05 18:03:20 | 000,068,854 | ---- | M] () -- C:\Users\Attila\Desktop\Registration.jpg
[2013/10/04 21:45:42 | 000,001,000 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 4™ Beta.lnk
[2013/10/04 21:44:47 | 000,138,904 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\PnkBstrK.sys

========== Files Created - No Company Name ==========

[2013/10/10 15:37:11 | 000,000,414 | ---- | C] () -- C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
[2013/10/10 14:48:34 | 392,956,213 | ---- | C] () -- C:\Users\Attila\Desktop\7DaystoDie(1).zip
[2013/10/07 11:56:11 | 000,000,940 | ---- | C] () -- C:\Users\Attila\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk
[2013/10/07 10:33:58 | 003,268,460 | ---- | C] () -- C:\Users\Attila\Desktop\tweaking.com_windows_repair_aio.zip
[2013/10/07 08:49:22 | 000,001,828 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2013/10/06 20:57:26 | 000,002,437 | ---- | C] () -- C:\Users\Attila\Desktop\iSpy.lnk
[2013/10/05 18:04:57 | 000,076,509 | ---- | C] () -- C:\Users\Attila\Desktop\Sign.jpg
[2013/10/05 18:03:19 | 000,068,854 | ---- | C] () -- C:\Users\Attila\Desktop\Registration.jpg
[2013/10/04 21:45:42 | 000,001,000 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 4™ Beta.lnk
[2013/07/07 07:46:35 | 000,001,479 | ---- | C] () -- C:\Users\Attila\.recently-used.xbel
[2013/07/05 19:38:25 | 000,000,212 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_profiles_data.dat
[2013/07/05 19:38:25 | 000,000,008 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_highscore.dat
[2013/06/21 17:21:59 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/06/21 17:21:59 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/06/21 17:21:58 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/06/21 17:21:58 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/06/21 17:21:58 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/12/19 15:45:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012/11/29 10:40:02 | 000,662,786 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012/09/19 14:09:40 | 000,076,660 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2012/09/04 10:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2012/09/04 10:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2012/09/02 17:06:21 | 000,002,544 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2012/02/26 10:09:10 | 000,088,198 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\icarus-dxdiag.xml
[2011/12/19 20:37:05 | 000,076,360 | ---- | C] () -- C:\Windows\System32\ladfGSRCoinst_i386.dll
[2011/10/24 20:52:49 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2010/05/01 00:48:51 | 000,000,094 | ---- | C] () -- C:\Users\Attila\AppData\Local\fusioncache.dat
[2010/04/23 23:03:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/03/11 20:04:19 | 000,976,384 | -HS- | C] () -- C:\Users\Attila\ehthumbs_vista.db
[2010/03/02 22:16:12 | 000,138,904 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\PnkBstrK.sys
[2009/03/07 16:22:55 | 000,008,512 | ---- | C] () -- C:\Users\Attila\AppData\Local\d3d9caps.dat
[2009/01/28 11:31:34 | 000,039,936 | ---- | C] () -- C:\Users\Attila\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2006/11/02 07:53:06 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 01:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/10/24 18:50:21 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\.minecraft
[2010/05/11 22:06:33 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Amazon
[2011/08/07 18:33:54 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\AtomZombieData
[2011/10/08 09:50:26 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Beat Hazard
[2011/07/28 21:50:32 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Broken Rules
[2012/05/26 11:25:12 | 000,000,000 | -HSD | M] -- C:\Users\Attila\AppData\Roaming\Common
[2011/07/28 23:41:34 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Crayon Physics Deluxe
[2012/07/28 21:43:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DarknessII
[2011/06/15 23:47:03 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DarksporeData
[2013/08/08 04:27:10 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DisplayFusion
[2013/06/23 12:18:17 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DNA
[2013/06/08 21:59:49 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Doublefine
[2011/06/25 23:29:31 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\fltk.org
[2011/06/22 00:20:20 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\GetRightToGo
[2013/07/07 07:46:35 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\gtk-2.0
[2013/10/08 08:54:50 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\iSpy
[2013/01/02 19:26:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\JawboneUpdater
[2011/07/28 21:47:21 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Lazy 8 Studios
[2010/06/03 19:57:48 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Leadertech
[2011/07/03 16:19:36 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Lionhead Studios
[2013/05/31 19:20:09 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Little Inferno
[2013/06/15 20:19:20 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\LolClient
[2011/08/14 23:34:01 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\MoreTerra
[2011/12/13 19:08:28 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Nicalis
[2013/08/10 09:19:44 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ooVoo Details
[2009/10/13 09:01:41 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\OpenOffice.org
[2013/10/04 20:57:39 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Origin
[2011/12/22 19:27:29 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Polynomial
[2009/02/23 23:27:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\QQ Games Plugin
[2013/06/15 16:06:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Riot Games
[2012/02/20 23:23:11 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\RotMG.Production
[2012/07/21 18:40:12 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\six-updater
[2012/07/21 18:39:35 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\six-zsync
[2010/12/23 21:58:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Spore
[2012/08/04 16:30:59 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Subversion
[2013/07/13 21:05:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\System
[2012/01/31 08:02:14 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\SystemRequirementsLab
[2013/09/03 16:21:51 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\The Creative Assembly
[2010/07/02 12:11:03 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Tropico 3
[2013/11/03 03:47:41 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\TS3Client
[2013/09/05 20:48:25 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ts3overlay
[2010/05/01 00:49:00 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Turbine
[2013/07/14 20:40:26 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Ubisoft
[2013/03/24 17:14:34 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Uniblue
[2011/10/31 20:09:30 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Voxatron
[2010/09/12 18:13:08 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Wireshark
[2013/07/13 21:24:12 | 000,000,000 | -HSD | M] -- C:\Users\Attila\AppData\Roaming\wyUpdate AU
[2012/02/20 23:20:37 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ZumoCast

========== Purity Check ==========



< End of report >

Edited by ElevatedMinds, 05 November 2013 - 05:46 AM.

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Disable Spybot's TeaTimer to make sure it won't interfere with fixes. You can re-enable it when you're clean again:

* Run Spybot-S&D in Advanced Mode
* If it is not already set to do this, go to the Mode menu
select
Advanced Mode
* On the left hand side, click on Tools
* Then click on the Resident icon in the list
* Uncheck
Resident TeaTimer
and OK any prompts.



1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check, but don't restart yet.

Right click on (My) Computer and select Manage (Continue) Then the Event Viewer. Next select Windows Logs. Right click on System and Clear Log, Clear. Repeat for Application. Reboot. The disk check will run and will probably take an hour or more to finish.


Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator. Then type (with an Enter after each line).

sfc /scannow

(SPACE after sfc. This will check your critical system files. Does this finish without complaint? IF it says it couldn't fix everything then:

Copy the next two lines:

findstr /c:"[SR]" \windows\logs\cbs\cbs.log > \windows\logs\cbs\junk.txt
notepad \windows\logs\cbs\junk.txt

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue. Right click and Paste or Edit then Paste and the copied line should appear.
Hit Enter if notepad does not open. Copy and paste the text from notepad into a reply. Close nOtepad. Close the Command Window.


1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.


Download : ADWCleaner to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @BleepingComputer

NOTE: If using Internet Explorer and you get an alert that stops the program downloading, click on the warning and allow the download to complete.

Close all programs, pause your anti-virus and run AdwCleaner (Vista or Win 7 => right click and Run As Administrator).

Posted Image

Click on Scan and follow the prompts. Let it run unhindered. When done, click on the Clean button, and follow the prompts. Allow the system to reboot. You will then be presented with the report. Copy & Paste this report on your next reply.

The report will be saved in the C:\AdwCleaner folder.



Junkware-Removal-Tool

Please download Junkware Removal Tool to your desktop. Make sure you get the correct Download button. Sometimes the ads on BleepingComputer will mimic the real Download button which should say: Download Now @Author's site
  • Pause your anti-virus. Close all browsers.
  • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.



Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste log back here.
  • The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.


Copy the text in the code box:

DRIVES
nnetsvcs
%SYSTEMDRIVE%\*.exe
%systemroot%\assembly\GAC_32\*.ini
%systemroot%\assembly\GAC_64\*.ini
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%SYSTEMDRIVE%\*.exe
%ALLUSERSPROFILE%\Application Data\*.exe
%APPDATA%\*.
/md5start
rsvpsp.dll
pnrpnsp.dll 
nwprovau.dll
nlaapi.dll
napinsp.dll
mswsock.dll
winrnr.dll
wshelper.dll
services.exe
atapi.sys
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
csrss.exe
PrintIsolationHost.exe
consrv.dll
user32.dll
/md5stop
dir C:\ /S /A:L /C
C:\Windows\assembly\tmp\U\*.* /s
%systemroot%\*. /mp /s
hklm\software\clients\startmenuinternet|command /rs
hklm\software\clients\startmenuinternet|command /64 /rs
%systemroot%\system32\*.dll /lockedfiles
%systemroot%\Tasks\*.job /lockedfiles
%ProgramFiles%\WINDOWS NT\*.* /s
%systemroot%\system32\drivers\*.sys /lockedfiles
CREATERESTOREPOINT

Run OTL (Vista or Win 7 => right click and Run As Administrator)

Paste (Ctrl + v) the copied text in the box where it says Custom Scan/Fixes

Select the All option in the Extra Registry group then Run Scan.

You should get two logs. Please copy and paste both of them.

Get Process Explorer

http://live.sysinter...com/procexp.exe
Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator).

View, Select Column, check Verified Signer, OK
Options, Verify Image Signatures


Click twice on the CPU column header to sort things by CPU usage with the big hitters at the top.

Wait a full minute then:

File, Save As, Save. Open the file Procexp.txt on your desktop and copy and paste the text to a reply.


Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button - Do NOT press the large Start Download button on the upper left!) Download, Save and Install it. Run Speccy. When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System. (It will be near the top about 10 lines down.) Attach the file to your next post.
  • 0

#3
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Ran the disk check option, scheduled a disk check for drive C. Tried to reboot normally. Did not work. Computers screen goes blank after BIOS loading. Tried to repair windows startup, didnt work, screen went blank after BIOS Screen. After multiple hard resets, I managed to get back on, it ran the disk check, very, very quickly (less then 30 seconds) said everything was clean.
Would you like me to try again?

As for the SFC scannow log, it completed at 100% but says it was unable to fix some corrupt files and will fix on the next reboot (assuming I can get it to reboot normally).

sfc scannow log:
2013-11-07 21:26:46, Info CSI 00000006 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:26:46, Info CSI 00000007 [SR] Beginning Verify and Repair transaction
2013-11-07 21:26:51, Info CSI 00000009 [SR] Verify complete
2013-11-07 21:26:53, Info CSI 0000000a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:26:53, Info CSI 0000000b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:02, Info CSI 0000000d [SR] Verify complete
2013-11-07 21:27:02, Info CSI 0000000e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:02, Info CSI 0000000f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:05, Info CSI 00000011 [SR] Verify complete
2013-11-07 21:27:05, Info CSI 00000012 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:05, Info CSI 00000013 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:06, Info CSI 00000015 [SR] Verify complete
2013-11-07 21:27:07, Info CSI 00000016 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:07, Info CSI 00000017 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:09, Info CSI 00000019 [SR] Verify complete
2013-11-07 21:27:09, Info CSI 0000001a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:09, Info CSI 0000001b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:11, Info CSI 0000001d [SR] Verify complete
2013-11-07 21:27:11, Info CSI 0000001e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:11, Info CSI 0000001f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:12, Info CSI 00000021 [SR] Verify complete
2013-11-07 21:27:13, Info CSI 00000022 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:13, Info CSI 00000023 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:14, Info CSI 00000025 [SR] Verify complete
2013-11-07 21:27:15, Info CSI 00000026 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:15, Info CSI 00000027 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:16, Info CSI 00000029 [SR] Verify complete
2013-11-07 21:27:16, Info CSI 0000002a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:16, Info CSI 0000002b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:17, Info CSI 0000002d [SR] Verify complete
2013-11-07 21:27:18, Info CSI 0000002e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:18, Info CSI 0000002f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:19, Info CSI 00000031 [SR] Verify complete
2013-11-07 21:27:20, Info CSI 00000032 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:20, Info CSI 00000033 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:21, Info CSI 00000035 [SR] Verify complete
2013-11-07 21:27:22, Info CSI 00000036 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:22, Info CSI 00000037 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:23, Info CSI 00000039 [SR] Verify complete
2013-11-07 21:27:23, Info CSI 0000003a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:23, Info CSI 0000003b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:25, Info CSI 0000003d [SR] Verify complete
2013-11-07 21:27:25, Info CSI 0000003e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:25, Info CSI 0000003f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:27, Info CSI 00000041 [SR] Verify complete
2013-11-07 21:27:27, Info CSI 00000042 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:27, Info CSI 00000043 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:28, Info CSI 00000045 [SR] Verify complete
2013-11-07 21:27:29, Info CSI 00000046 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:29, Info CSI 00000047 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:30, Info CSI 00000049 [SR] Verify complete
2013-11-07 21:27:31, Info CSI 0000004a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:31, Info CSI 0000004b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:32, Info CSI 0000004d [SR] Verify complete
2013-11-07 21:27:33, Info CSI 0000004e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:33, Info CSI 0000004f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:34, Info CSI 00000051 [SR] Verify complete
2013-11-07 21:27:34, Info CSI 00000052 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:34, Info CSI 00000053 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:36, Info CSI 00000055 [SR] Verify complete
2013-11-07 21:27:37, Info CSI 00000056 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:37, Info CSI 00000057 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:38, Info CSI 00000059 [SR] Verify complete
2013-11-07 21:27:38, Info CSI 0000005a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:38, Info CSI 0000005b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:39, Info CSI 0000005d [SR] Verify complete
2013-11-07 21:27:40, Info CSI 0000005e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:40, Info CSI 0000005f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:41, Info CSI 00000061 [SR] Verify complete
2013-11-07 21:27:41, Info CSI 00000062 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:41, Info CSI 00000063 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:43, Info CSI 00000065 [SR] Verify complete
2013-11-07 21:27:43, Info CSI 00000066 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:43, Info CSI 00000067 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:44, Info CSI 00000069 [SR] Verify complete
2013-11-07 21:27:45, Info CSI 0000006a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:45, Info CSI 0000006b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:46, Info CSI 0000006d [SR] Verify complete
2013-11-07 21:27:46, Info CSI 0000006e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:46, Info CSI 0000006f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:49, Info CSI 00000071 [SR] Verify complete
2013-11-07 21:27:49, Info CSI 00000072 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:49, Info CSI 00000073 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:50, Info CSI 00000075 [SR] Verify complete
2013-11-07 21:27:51, Info CSI 00000076 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:51, Info CSI 00000077 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:52, Info CSI 00000079 [SR] Verify complete
2013-11-07 21:27:53, Info CSI 0000007a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:53, Info CSI 0000007b [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:55, Info CSI 0000007d [SR] Verify complete
2013-11-07 21:27:55, Info CSI 0000007e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:55, Info CSI 0000007f [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:56, Info CSI 00000081 [SR] Verify complete
2013-11-07 21:27:57, Info CSI 00000082 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:57, Info CSI 00000083 [SR] Beginning Verify and Repair transaction
2013-11-07 21:27:58, Info CSI 00000085 [SR] Verify complete
2013-11-07 21:27:59, Info CSI 00000086 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:27:59, Info CSI 00000087 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:00, Info CSI 00000089 [SR] Verify complete
2013-11-07 21:28:01, Info CSI 0000008a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:01, Info CSI 0000008b [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:02, Info CSI 0000008d [SR] Verify complete
2013-11-07 21:28:02, Info CSI 0000008e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:02, Info CSI 0000008f [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:05, Info CSI 00000091 [SR] Verify complete
2013-11-07 21:28:06, Info CSI 00000092 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:06, Info CSI 00000093 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:07, Info CSI 00000095 [SR] Verify complete
2013-11-07 21:28:07, Info CSI 00000096 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:07, Info CSI 00000097 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:09, Info CSI 00000099 [SR] Verify complete
2013-11-07 21:28:09, Info CSI 0000009a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:09, Info CSI 0000009b [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:10, Info CSI 0000009d [SR] Verify complete
2013-11-07 21:28:11, Info CSI 0000009e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:11, Info CSI 0000009f [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:13, Info CSI 000000a1 [SR] Verify complete
2013-11-07 21:28:14, Info CSI 000000a2 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:14, Info CSI 000000a3 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:19, Info CSI 000000a5 [SR] Verify complete
2013-11-07 21:28:19, Info CSI 000000a6 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:19, Info CSI 000000a7 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:24, Info CSI 000000a9 [SR] Verify complete
2013-11-07 21:28:24, Info CSI 000000aa [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:24, Info CSI 000000ab [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:30, Info CSI 000000ae [SR] Verify complete
2013-11-07 21:28:30, Info CSI 000000af [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:30, Info CSI 000000b0 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:35, Info CSI 000000b2 [SR] Verify complete
2013-11-07 21:28:35, Info CSI 000000b3 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:35, Info CSI 000000b4 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:39, Info CSI 000000b7 [SR] Verify complete
2013-11-07 21:28:40, Info CSI 000000b8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:40, Info CSI 000000b9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:46, Info CSI 000000bb [SR] Verify complete
2013-11-07 21:28:46, Info CSI 000000bc [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:46, Info CSI 000000bd [SR] Beginning Verify and Repair transaction
2013-11-07 21:28:55, Info CSI 000000c7 [SR] Verify complete
2013-11-07 21:28:55, Info CSI 000000c8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:28:55, Info CSI 000000c9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:01, Info CSI 000000cb [SR] Verify complete
2013-11-07 21:29:01, Info CSI 000000cc [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:01, Info CSI 000000cd [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:07, Info CSI 000000cf [SR] Verify complete
2013-11-07 21:29:08, Info CSI 000000d0 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:08, Info CSI 000000d1 [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:11, Info CSI 000000d3 [SR] Verify complete
2013-11-07 21:29:12, Info CSI 000000d4 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:12, Info CSI 000000d5 [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:18, Info CSI 000000d7 [SR] Verify complete
2013-11-07 21:29:19, Info CSI 000000d8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:19, Info CSI 000000d9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:27, Info CSI 000000db [SR] Verify complete
2013-11-07 21:29:27, Info CSI 000000dc [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:27, Info CSI 000000dd [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:37, Info CSI 000000e1 [SR] Verify complete
2013-11-07 21:29:38, Info CSI 000000e2 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:38, Info CSI 000000e3 [SR] Beginning Verify and Repair transaction
2013-11-07 21:29:48, Info CSI 000000e5 [SR] Verify complete
2013-11-07 21:29:49, Info CSI 000000e6 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:29:49, Info CSI 000000e7 [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:02, Info CSI 000000e9 [SR] Verify complete
2013-11-07 21:30:03, Info CSI 000000ea [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:03, Info CSI 000000eb [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:12, Info CSI 000000ed [SR] Verify complete
2013-11-07 21:30:12, Info CSI 000000ee [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:12, Info CSI 000000ef [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:15, Info CSI 000000f1 [SR] Verify complete
2013-11-07 21:30:15, Info CSI 000000f2 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:15, Info CSI 000000f3 [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:18, Info CSI 000000f5 [SR] Verify complete
2013-11-07 21:30:18, Info CSI 000000f6 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:18, Info CSI 000000f7 [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:21, Info CSI 000000f9 [SR] Verify complete
2013-11-07 21:30:21, Info CSI 000000fa [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:21, Info CSI 000000fb [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:32, Info CSI 00000119 [SR] Verify complete
2013-11-07 21:30:32, Info CSI 0000011a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:32, Info CSI 0000011b [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:35, Info CSI 0000011d [SR] Verify complete
2013-11-07 21:30:35, Info CSI 0000011e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:35, Info CSI 0000011f [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:39, Info CSI 00000121 [SR] Verify complete
2013-11-07 21:30:39, Info CSI 00000122 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:39, Info CSI 00000123 [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:43, Info CSI 00000125 [SR] Verify complete
2013-11-07 21:30:43, Info CSI 00000126 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:43, Info CSI 00000127 [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:51, Info CSI 00000129 [SR] Verify complete
2013-11-07 21:30:51, Info CSI 0000012a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:30:51, Info CSI 0000012b [SR] Beginning Verify and Repair transaction
2013-11-07 21:30:59, Info CSI 0000012e [SR] Verify complete
2013-11-07 21:31:00, Info CSI 0000012f [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:00, Info CSI 00000130 [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:03, Info CSI 00000132 [SR] Verify complete
2013-11-07 21:31:03, Info CSI 00000133 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:03, Info CSI 00000134 [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:12, Info CSI 00000136 [SR] Verify complete
2013-11-07 21:31:12, Info CSI 00000137 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:12, Info CSI 00000138 [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:16, Info CSI 0000013a [SR] Verify complete
2013-11-07 21:31:16, Info CSI 0000013b [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:16, Info CSI 0000013c [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:21, Info CSI 0000013e [SR] Verify complete
2013-11-07 21:31:21, Info CSI 0000013f [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:21, Info CSI 00000140 [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:30, Info CSI 00000142 [SR] Verify complete
2013-11-07 21:31:30, Info CSI 00000143 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:30, Info CSI 00000144 [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:42, Info CSI 00000169 [SR] Verify complete
2013-11-07 21:31:42, Info CSI 0000016a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:42, Info CSI 0000016b [SR] Beginning Verify and Repair transaction
2013-11-07 21:31:51, Info CSI 0000016d [SR] Verify complete
2013-11-07 21:31:51, Info CSI 0000016e [SR] Verifying 100 (0x00000064) components
2013-11-07 21:31:51, Info CSI 0000016f [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:11, Info CSI 00000171 [SR] Verify complete
2013-11-07 21:32:11, Info CSI 00000172 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:11, Info CSI 00000173 [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:24, Info CSI 00000175 [SR] Verify complete
2013-11-07 21:32:24, Info CSI 00000176 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:24, Info CSI 00000177 [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:33, Info CSI 00000179 [SR] Verify complete
2013-11-07 21:32:34, Info CSI 0000017a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:34, Info CSI 0000017b [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:36, Info CSI 0000017d [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:32:39, Info CSI 0000017f [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:32:39, Info CSI 00000180 [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"
2013-11-07 21:32:39, Info CSI 00000183 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2013-11-07 21:32:39, Info CSI 00000185 [SR] Verify complete
2013-11-07 21:32:40, Info CSI 00000186 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:40, Info CSI 00000187 [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:45, Info CSI 00000189 [SR] Verify complete
2013-11-07 21:32:46, Info CSI 0000018a [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:46, Info CSI 0000018b [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:50, Info CSI 0000018e [SR] Verify complete
2013-11-07 21:32:51, Info CSI 0000018f [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:51, Info CSI 00000190 [SR] Beginning Verify and Repair transaction
2013-11-07 21:32:55, Info CSI 00000192 [SR] Verify complete
2013-11-07 21:32:56, Info CSI 00000193 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:32:56, Info CSI 00000194 [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:10, Info CSI 00000196 [SR] Verify complete
2013-11-07 21:33:10, Info CSI 00000197 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:10, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:17, Info CSI 0000019a [SR] Verify complete
2013-11-07 21:33:17, Info CSI 0000019b [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:17, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:25, Info CSI 0000019e [SR] Verify complete
2013-11-07 21:33:25, Info CSI 0000019f [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:25, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:32, Info CSI 000001a2 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:33:33, Info CSI 000001a4 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:33:33, Info CSI 000001a5 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"
2013-11-07 21:33:36, Info CSI 000001a7 [SR] Verify complete
2013-11-07 21:33:36, Info CSI 000001a8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:36, Info CSI 000001a9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:42, Info CSI 000001ab [SR] Verify complete
2013-11-07 21:33:42, Info CSI 000001ac [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:42, Info CSI 000001ad [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:50, Info CSI 000001af [SR] Verify complete
2013-11-07 21:33:50, Info CSI 000001b0 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:50, Info CSI 000001b1 [SR] Beginning Verify and Repair transaction
2013-11-07 21:33:59, Info CSI 000001b4 [SR] Verify complete
2013-11-07 21:33:59, Info CSI 000001b5 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:33:59, Info CSI 000001b6 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:06, Info CSI 000001b8 [SR] Verify complete
2013-11-07 21:34:07, Info CSI 000001b9 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:07, Info CSI 000001ba [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:13, Info CSI 000001bc [SR] Verify complete
2013-11-07 21:34:14, Info CSI 000001bd [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:14, Info CSI 000001be [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:20, Info CSI 000001c0 [SR] Verify complete
2013-11-07 21:34:20, Info CSI 000001c1 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:20, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:26, Info CSI 000001c4 [SR] Verify complete
2013-11-07 21:34:26, Info CSI 000001c5 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:26, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:32, Info CSI 000001c8 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:34:32, Info CSI 000001ca [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:34:33, Info CSI 000001ce [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:34:33, Info CSI 000001d0 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:34:34, Info CSI 000001d7 [SR] Verify complete
2013-11-07 21:34:35, Info CSI 000001d8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:35, Info CSI 000001d9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:40, Info CSI 000001db [SR] Verify complete
2013-11-07 21:34:40, Info CSI 000001dc [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:40, Info CSI 000001dd [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:49, Info CSI 000001df [SR] Verify complete
2013-11-07 21:34:49, Info CSI 000001e0 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:49, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:56, Info CSI 000001e3 [SR] Verify complete
2013-11-07 21:34:57, Info CSI 000001e4 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:57, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction
2013-11-07 21:34:59, Info CSI 000001e7 [SR] Verify complete
2013-11-07 21:34:59, Info CSI 000001e8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:34:59, Info CSI 000001e9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:07, Info CSI 000001eb [SR] Verify complete
2013-11-07 21:35:08, Info CSI 000001ec [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:08, Info CSI 000001ed [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:13, Info CSI 000001ef [SR] Verify complete
2013-11-07 21:35:14, Info CSI 000001f0 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:14, Info CSI 000001f1 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:19, Info CSI 000001f3 [SR] Verify complete
2013-11-07 21:35:19, Info CSI 000001f4 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:19, Info CSI 000001f5 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:38, Info CSI 000001f7 [SR] Verify complete
2013-11-07 21:35:38, Info CSI 000001f8 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:38, Info CSI 000001f9 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:41, Info CSI 000001fb [SR] Verify complete
2013-11-07 21:35:41, Info CSI 000001fc [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:41, Info CSI 000001fd [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:47, Info CSI 000001ff [SR] Verify complete
2013-11-07 21:35:47, Info CSI 00000200 [SR] Verifying 100 (0x00000064) components
2013-11-07 21:35:47, Info CSI 00000201 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:55, Info CSI 0000020c [SR] Verify complete
2013-11-07 21:35:55, Info CSI 0000020d [SR] Verifying 24 (0x00000018) components
2013-11-07 21:35:55, Info CSI 0000020e [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:56, Info CSI 00000210 [SR] Verify complete
2013-11-07 21:35:56, Info CSI 00000211 [SR] Repairing 4 components
2013-11-07 21:35:56, Info CSI 00000212 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:56, Info CSI 00000214 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:56, Info CSI 00000216 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:56, Info CSI 00000218 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:35:56, Info CSI 0000021a [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:35:56, Info CSI 0000021e [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:56, Info CSI 0000021f [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"
2013-11-07 21:35:56, Info CSI 00000222 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2013-11-07 21:35:56, Info CSI 00000224 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:56, Info CSI 00000225 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"
2013-11-07 21:35:56, Info CSI 00000227 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:35:56, Info CSI 00000229 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:35:56, Info CSI 0000022d [SR] Repair complete
2013-11-07 21:35:56, Info CSI 0000022e [SR] Committing transaction
2013-11-07 21:35:56, Info CSI 0000022f [SR] Cannot commit interactively, there are boot critical components being repaired
2013-11-07 21:35:56, Info CSI 00000230 [SR] Repairing 4 components
2013-11-07 21:35:56, Info CSI 00000231 [SR] Beginning Verify and Repair transaction
2013-11-07 21:35:56, Info CSI 00000233 [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:57, Info CSI 00000235 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:57, Info CSI 00000237 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:35:57, Info CSI 00000239 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:35:57, Info CSI 0000023d [SR] Cannot repair member file [l:20{10}]"tcpmon.ini" of Microsoft-Windows-Printing-StandardPortMonitor-TCPMonINI, Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:57, Info CSI 0000023e [SR] This component was referenced by [l:160{80}]"Package_30_for_KB936330~31bf3856ad364e35~x86~~6.0.1.18000.936330-187_neutral_GDR"
2013-11-07 21:35:57, Info CSI 00000241 [SR] Could not reproject corrupted file [ml:520{260},l:46{23}]"\??\C:\Windows\System32"\[l:20{10}]"tcpmon.ini"; source file in store is also corrupted
2013-11-07 21:35:57, Info CSI 00000243 [SR] Cannot repair member file [l:24{12}]"settings.ini" of Microsoft-Windows-Sidebar, Version = 6.0.6002.18005, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral, TypeName neutral, PublicKey neutral in the store, hash mismatch
2013-11-07 21:35:57, Info CSI 00000244 [SR] This component was referenced by [l:158{79}]"Package_16_for_KB948465~31bf3856ad364e35~x86~~6.0.1.18005.948465-49_neutral_GDR"
2013-11-07 21:35:57, Info CSI 00000246 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:42{21}]"Wdf01000Uninstall.mof" from store
2013-11-07 21:35:57, Info CSI 00000248 [SR] Repairing corrupted file [ml:58{29},l:56{28}]"\??\C:\Windows\system32\wbem"\[l:24{12}]"Wdf01000.mof" from store
2013-11-07 21:35:57, Info CSI 0000024c [SR] Repair complete
  • 0

#4
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
VEW System Log:
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 07/11/2013 9:46:24 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 08/11/2013 2:26:58 AM
Type: Error Category: 0
Event: 2001 Source: Microsoft Antimalware
Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: Previous Signature Version: 1.161.1475.0 Update Source: Microsoft Update Server Update Stage: Search Source Path: http://www.microsoft.com Signature Type: AntiVirus Update Type: Full User: NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10003.0 Error code: 0x80096001 Error description: A system-level error occurred while verifying trust.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'System' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'System' Date/Time: 08/11/2013 1:35:12 AM
Type: Warning Category: 2
Event: 57 Source: volmgr
The system failed to flush data to the transaction log. Corruption may occur.

Log: 'System' Date/Time: 08/11/2013 1:31:21 AM
Type: Warning Category: 2
Event: 57 Source: volmgr
The system failed to flush data to the transaction log. Corruption may occur.

Log: 'System' Date/Time: 08/11/2013 1:30:46 AM
Type: Warning Category: 2
Event: 57 Source: volmgr
The system failed to flush data to the transaction log. Corruption may occur.

Log: 'System' Date/Time: 08/11/2013 1:29:26 AM
Type: Warning Category: 2
Event: 57 Source: volmgr
The system failed to flush data to the transaction log. Corruption may occur.
  • 0

#5
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
VEW Application Log:
Vino's Event Viewer v01c run on Windows Vista in English
Report run at 07/11/2013 9:48:18 PM

Note: All dates below are in the format dd/mm/yyyy

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Error Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 08/11/2013 2:18:20 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files\Origin Games\Battlefield 4 Beta\bf4.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 08/11/2013 2:17:15 AM
Type: Error Category: 0
Event: 33 Source: SideBySide
Activation context generation failed for "C:\Program Files\Origin Games\Battlefield 4 Beta\bf4.exe". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis.

Log: 'Application' Date/Time: 08/11/2013 2:16:56 AM
Type: Error Category: 0
Event: 10 Source: Microsoft-Windows-WMI
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
'Application' Log - Warning Type
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Log: 'Application' Date/Time: 08/11/2013 1:30:48 AM
Type: Warning Category: 0
Event: 1530 Source: Microsoft-Windows-User Profiles Service
Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards. DETAIL - 1 user registry handles leaked from \Registry\User\S-1-5-21-1944996874-710951996-293725333-1001_Classes:
Process 12 (\Device\HarddiskVolume3\Windows\System32\spoolsv.exe) has opened key \REGISTRY\USER\S-1-5-21-1944996874-710951996-293725333-1001_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\MuiCache
  • 0

#6
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
# AdwCleaner v3.011 - Report created 07/11/2013 at 21:53:44
# Updated 03/11/2013 by Xplode
# Operating System : Windows Vista ™ Ultimate Service Pack 2 (32 bits)
# Username : Attila - ATTILA-PC
# Running from : C:\Users\Attila\Desktop\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitLord
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\DriverScanner
Folder Deleted : C:\Program Files\BitLord
Folder Deleted : C:\Program Files\driver-soft
Folder Deleted : C:\Program Files\Uniblue\DriverScanner
Folder Deleted : C:\Users\Attila\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\Users\Attila\AppData\Roaming\Uniblue\DriverScanner
Folder Deleted : C:\Program Files\Mozilla Firefox\Extensions\[email protected]

***** [ Shortcuts ] *****


***** [ Registry ] *****

[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{407EB8FA-8E87-4B19-8828-D8E8890495FD}
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220222182204}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550255185504}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660266186604}
Key Deleted : HKLM\Software\Uniblue\DriverScanner
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C2F8CA82-2BD9-4513-B2D1-08A47914C1DA}_is1

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16490


-\\ Mozilla Firefox v25.0 (en-US)

[ File : C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\prefs.js ]

Line Deleted : user_pref("extensions.crossrider.bic", "13c69d773e8b162e1af04fde41fa2dab");

*************************

AdwCleaner[R0].txt - [2227 octets] - [07/11/2013 21:51:56]
AdwCleaner[S0].txt - [2204 octets] - [07/11/2013 21:53:44]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2264 octets] ##########
  • 0

#7
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
JRT Log:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows Vista ™ Ultimate x86
Ran by Attila on Thu 11/07/2013 at 22:04:09.83
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110211181104}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984}



~~~ Files

Successfully deleted: [File] C:\Windows\System32\Tasks\dsmonitor
Successfully deleted: [File] C:\Windows\System32\Tasks\Updater21804.exe
Successfully deleted: [File] C:\Windows\Tasks\dsmonitor.job



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Attila\appdata\local\updater21804"
Successfully deleted: [Folder] "C:\Program Files\torrentman"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Successfully deleted: [Folder] "C:\Windows\system32\ai_recyclebin"



~~~ FireFox

Failed to delete: [File] "C:\Program Files\Mozilla Firefox\searchplugins\bing.xml.old"
Emptied folder: C:\Users\Attila\AppData\Roaming\mozilla\firefox\profiles\g70ha1li.default\minidumps [103 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 11/07/2013 at 22:07:34.48
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • 0

#8
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
FRST Log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-10-2013
Ran by Attila (administrator) on ATTILA-PC on 07-11-2013 22:13:00
Running from C:\Users\Attila\Desktop
Microsoft® Windows Vista™ Ultimate Service Pack 2 (X86) OS Language: English(US)
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AMD) C:\Windows\system32\atieclxx.exe
(SANDBOXIE L.T.D) C:\Program Files\Sandboxie\SbieSvc.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(SupportSoft, Inc.) C:\Program Files\Dell Support Center\bin\sprtcmd.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\Razer\Lachesis\razerhid.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Razer USA Ltd) C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe
(razercfg MFC Application) C:\Program Files\Razer\Lachesis\OSD.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Seagate LLC) C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusion.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\Jawbone\JawboneUpdater.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusionService.exe
(Seagate Technology LLC) C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
(LogMeIn Inc.) C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
(SupportSoft, Inc.) C:\Program Files\Dell Support Center\bin\sprtsvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Safer Networking Ltd.) C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Program Files\Razer\Lachesis\razertra.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\WMPSideShowGadget.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmplayer.exe
(Razer Inc.) C:\Program Files\Razer\Lachesis\razerofa.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\system32\wbem\unsecapp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\system32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4706304 2008-02-01] (Realtek Semiconductor)
HKLM\...\Run: [Google Desktop Search] - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-02-09] (Google)
HKLM\...\Run: [dscactivate] - C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe [16384 2008-03-11] ( )
HKLM\...\Run: [PDVDDXSrv] - C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe [128296 2008-02-26] (CyberLink Corp.)
HKLM\...\Run: [DellSupportCenter] - "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [413696 2009-01-05] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [342312 2009-03-12] (Apple Inc.)
HKLM\...\Run: [HotKeysCmds] - C:\Windows\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [LogMeIn GUI] - C:\Program Files\LogMeIn\x86\LogMeInSystray.exe [63048 2008-08-11] (LogMeIn, Inc.)
HKLM\...\Run: [ATICustomerCare] - C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Lachesis] - C:\Program Files\Razer\Lachesis\razerhid.exe [172032 2007-09-12] ()
HKLM\...\Run: [AmazonGSDownloaderTray] - C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe [326144 2009-10-23] (Amazon.com)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [101144 2011-09-29] (Logitech Inc.)
HKLM\...\Run: [Razer Blackwidow Driver] - C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe [887712 2011-05-16] (Razer USA Ltd)
HKLM\...\Run: [DivXMediaServer] - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe [450560 2013-01-29] (DivX, LLC)
HKLM\...\Run: [DivXUpdate] - C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1263952 2013-02-12] ()
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642808 2012-12-19] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2255184 2013-05-15] (LogMeIn Inc.)
HKLM\...\Run: [MaxMenuMgr] - C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe [185640 2009-05-01] (Seagate LLC)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995184 2013-07-18] (Microsoft Corporation)
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-01-21] (Google Inc.)
HKCU\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [125952 2008-01-20] (Microsoft Corporation)
HKCU\...\Run: [DellSupportCenter] - "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
HKCU\...\Run: [DisplayFusion] - C:\Program Files\DisplayFusion\DisplayFusion.exe [7203712 2013-02-11] (Binary Fortress Software)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [2938552 2010-04-30] ()
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
HKCU\...\Run: [SandboxieControl] - C:\Program Files\Sandboxie\SbieCtrl.exe [442640 2011-11-23] (SANDBOXIE L.T.D)
HKCU\...\Run: [WMPNSCFG] - C:\Program Files\Windows Media Player\wmpnscfg.exe [202240 2008-01-20] (Microsoft Corporation)
HKCU\...\Run: [Overwolf] - C:\Program Files\Overwolf\Overwolf.exe [35256 2013-10-23] (Overwolf)
HKCU\...\Run: [EADM] - C:\Program Files\Origin\Origin.exe [3561816 2013-11-03] (Electronic Arts)
HKU\Administrator\...\Run: [ooVoo] - C\ooVoo.exe /minimized
HKU\Default\...\Run: [ooVoo] - C\ooVoo.exe /minimized
HKU\Default User\...\Run: [ooVoo] - C\ooVoo.exe /minimized
HKU\Mcx1\...\Run: [ehTray.exe] - C:\Windows\ehome\ehtray.exe [ 2008-01-20] (Microsoft Corporation)
HKU\Mcx1\...\Winlogon: [Shell] C:\Windows\eHome\McrMgr.exe [ 2009-04-11] (Microsoft Corporation) <==== ATTENTION
AppInit_DLLs: C:\PROGRA~1\GOOGLE\GOOGLE~3\GOOGLEDESKTOPNETWORK3.DLL C:\PROGRA~1\GOOGLE\GOOGLE~3\GOEC62~1.DLL [ 2010-02-09] (Google)
Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launch Jawbone Updater.lnk
ShortcutTarget: Launch Jawbone Updater.lnk -> C:\Program Files\Jawbone\LaunchJU.exe ()
Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
ShortcutTarget: OpenOffice.org 3.1.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft...=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
URLSearchHook: HKLM - AIM Toolbar Search Class - {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
SearchScopes: HKLM - DefaultScope value is missing.
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: AIM Toolbar Loader - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - AIM Toolbar - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - AIM Toolbar - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 05 C:\Program Files\Bonjour\mdnsNSP.dll [147456] (Apple Inc.)

FireFox:
========
FF ProfilePath: C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default
FF DefaultSearchEngine: Bing
FF SelectedSearchEngine: Bing
FF Homepage: hxxp://www.google.com
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @esn.me/esnsonar,version=0.70.4 - C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin: @esn/esnlaunch,version=2.3.0 - C:\Program Files\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @movenetworks.com/Quantum Media Player - C:\Users\Attila\AppData\Roaming\Move Networks\plugins\npqmp071503000010.dll (Move Networks)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Attila\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search-1.xml
FF SearchPlugin: C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml
FF Extension: LavaFox V2-Blue - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\[email protected]
FF Extension: LavaFox V2 - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\[email protected]
FF Extension: LogMeIn, Inc. Remote Access Plugin - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\[email protected]
FF Extension: LavaFox V2-Green - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\[email protected]
FF Extension: Microsoft .NET Framework Assistant - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF Extension: FT DeepDark - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}(235)
FF Extension: Unlinker - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{8ed952a0-199c-11d9-9669-0800200c9a66}
FF Extension: WOT - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
FF Extension: nasanightlaunch - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\[email protected]
FF Extension: prefs - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: Adblock Plus - C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Skype extension for Firefox - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKCU\...\Firefox\Extensions: [[email protected]] - C:\Users\Attila\AppData\Roaming\Move Networks
FF Extension: Move Media Player - C:\Users\Attila\AppData\Roaming\Move Networks
FF HKCU\...\Firefox\Extensions: [{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}] - C:\Users\Attila\Program Files\DNA

========================== Services (Whitelisted) =================

S3 Amazon Download Agent; C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe [401920 2009-10-23] (Amazon.com)
R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [132424 2009-03-05] (Apple Inc.)
S3 BEService; C:\Program Files\Common Files\BattlEye\BEService.exe [49152 2013-02-11] ()
R2 DisplayFusionService; C:\Program Files\DisplayFusion\DisplayFusionService.exe [1243024 2013-02-11] (Binary Fortress Software)
R2 FreeAgentGoNext Service; C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe [181544 2009-05-01] (Seagate Technology LLC)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-02-09] (Google)
S2 gupdate1c986f9ae59e6d8; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-02-04] (Google Inc.)
R2 Hamachi2Svc; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [1435984 2013-05-15] (LogMeIn Inc.)
S2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2013-07-18] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-07-18] (Microsoft Corporation)
S3 OverwolfUpdaterService; C:\Program Files\Overwolf\OverwolfUpdater.exe [18360 2013-10-23] (Overwolf Ltd)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [72976 2011-11-23] (SANDBOXIE L.T.D)
R2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
R2 sprtsvc_dellsupportcenter; C:\Program Files\Dell Support Center\bin\sprtsvc.exe [201968 2008-08-14] (SupportSoft, Inc.)
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [x]

==================== Drivers (Whitelisted) ====================

R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdLH3.sys [83984 2012-02-23] (Advanced Micro Devices)
R3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R3 LachesisFltr; C:\Windows\System32\drivers\Lachesis.sys [12032 2007-08-08] (Razer (Asia-Pacific) Pte Ltd)
S3 LADF_CaptureOnly; C:\Windows\System32\DRIVERS\ladfGSCi386.sys [378568 2011-12-19] (Logitech)
S3 LADF_DHP2; C:\Windows\System32\DRIVERS\ladfDHP2i386.sys [53520 2009-05-28] (Logitech)
S3 LADF_RenderOnly; C:\Windows\System32\DRIVERS\ladfGSRi386.sys [317384 2011-12-19] (Logitech)
S3 LADF_SBVM; C:\Windows\System32\DRIVERS\ladfSBVMi386.sys [334992 2009-05-28] (Logitech)
R3 LGBusEnum; C:\Windows\System32\drivers\LGBusEnum.sys [19720 2011-12-19] (Logitech Inc.)
R3 LGVirHid; C:\Windows\System32\drivers\LGVirHid.sys [14856 2011-12-19] (Logitech Inc.)
S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [42592 2012-11-29] (http://libusb-win32.sourceforge.net)
R2 LMIInfo; C:\Program Files\LogMeIn\x86\RaInfo.sys [12856 2008-08-11] (LogMeIn, Inc.)
R2 LMIRfsDriver; C:\Windows\system32\drivers\LMIRfsDriver.sys [47640 2008-08-11] (LogMeIn, Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35088 2010-06-25] (CACE Technologies, Inc.)
S3 R300; C:\Windows\System32\DRIVERS\atikmdag.sys [9647104 2012-12-19] (Advanced Micro Devices, Inc.)
R2 RtNdPt60; C:\Windows\System32\DRIVERS\RtNdPt60.sys [27648 2008-03-07] (Windows ® Codename Longhorn DDK provider)
R3 RzSynapse; C:\Windows\System32\DRIVERS\RzSynapse.sys [124672 2011-05-12] (Razer USA Ltd)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [125824 2012-09-02] (SANDBOXIE L.T.D)
S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [521216 2008-01-20] (Microsoft Corporation)
S3 AtiHdmiService; system32\drivers\AtiHdmi.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [x]
S3 IpInIp; system32\DRIVERS\ipinip.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [x]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-07 22:12 - 2013-11-07 22:12 - 01089445 _____ (Farbar) C:\Users\Attila\Desktop\FRST.exe
2013-11-07 22:12 - 2013-11-07 22:12 - 00000000 ____D C:\FRST
2013-11-07 22:07 - 2013-11-07 22:07 - 00001843 _____ C:\Users\Attila\Desktop\JRT.txt
2013-11-07 22:01 - 2013-11-07 22:01 - 00000000 ____D C:\Windows\ERUNT
2013-11-07 21:59 - 2013-11-07 21:59 - 01034531 _____ (Thisisu) C:\Users\Attila\Desktop\JRT.exe
2013-11-07 21:50 - 2013-11-07 21:53 - 00000000 ____D C:\AdwCleaner
2013-11-07 21:50 - 2013-11-07 21:50 - 01073262 _____ C:\Users\Attila\Desktop\AdwCleaner(1).exe
2013-11-07 21:49 - 2013-11-07 21:49 - 01073262 _____ C:\Users\Attila\Desktop\AdwCleaner.exe
2013-11-07 21:46 - 2013-11-07 21:48 - 00002325 _____ C:\VEW.txt
2013-11-07 20:25 - 2013-11-07 20:25 - 00061440 _____ ( ) C:\Users\Attila\Desktop\VEW.exe
2013-11-06 18:11 - 2013-11-06 18:11 - 01669632 _____ C:\Users\Attila\Desktop\SteamInstall.msi
2013-11-06 06:04 - 2013-11-07 21:19 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-05 20:28 - 2013-11-05 20:28 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-03 15:24 - 2013-11-03 15:24 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2013-11-03 07:59 - 2013-11-03 07:59 - 00108866 _____ C:\Users\Attila\Desktop\OTL.Txt
2013-11-03 07:34 - 2013-11-03 07:34 - 00602112 _____ (OldTimer Tools) C:\Users\Attila\Desktop\OTL.exe
2013-11-03 03:36 - 2013-11-03 03:36 - 00000000 ____D C:\ProgramData\Overwolf
2013-10-16 18:40 - 2013-10-16 18:41 - 16090616 _____ (SmartSoft Ltd) C:\Users\Attila\Desktop\SFTPMSI.exe
2013-10-10 15:37 - 2013-10-10 15:37 - 00000414 _____ C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
2013-10-10 14:54 - 2013-10-10 14:54 - 00000044 _____ C:\Users\Attila\Desktop\MCADMIN.txt
2013-10-10 14:48 - 2013-10-10 14:51 - 392956213 _____ C:\Users\Attila\Desktop\7DaystoDie(1).zip
2013-10-10 07:51 - 2013-10-10 07:57 - 00000000 ____D C:\Users\Public\Documents\stalker-shoc

==================== One Month Modified Files and Folders =======

2013-11-07 22:13 - 2010-04-30 21:47 - 00000000 ____D C:\Users\Attila\AppData\Local\PMB Files
2013-11-07 22:12 - 2013-11-07 22:12 - 01089445 _____ (Farbar) C:\Users\Attila\Desktop\FRST.exe
2013-11-07 22:12 - 2013-11-07 22:12 - 00000000 ____D C:\FRST
2013-11-07 22:12 - 2009-01-21 10:13 - 01843952 _____ C:\Windows\WindowsUpdate.log
2013-11-07 22:10 - 2006-11-02 05:33 - 00769362 _____ C:\Windows\system32\PerfStringBackup.INI
2013-11-07 22:07 - 2013-11-07 22:07 - 00001843 _____ C:\Users\Attila\Desktop\JRT.txt
2013-11-07 22:06 - 2013-09-10 16:17 - 00000000 ____D C:\Users\Attila\AppData\Local\Overwolf
2013-11-07 22:04 - 2013-10-02 20:07 - 00000000 ____D C:\Program Files\Origin
2013-11-07 22:04 - 2011-12-10 20:48 - 00000000 ____D C:\Users\Attila\AppData\Local\LogMeIn Hamachi
2013-11-07 22:03 - 2009-06-30 17:34 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-07 22:03 - 2006-11-02 08:00 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-07 22:03 - 2006-11-02 07:46 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-07 22:03 - 2006-11-02 07:46 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-07 22:02 - 2006-11-02 08:00 - 00032572 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-11-07 22:01 - 2013-11-07 22:01 - 00000000 ____D C:\Windows\ERUNT
2013-11-07 21:59 - 2013-11-07 21:59 - 01034531 _____ (Thisisu) C:\Users\Attila\Desktop\JRT.exe
2013-11-07 21:55 - 2012-04-26 19:09 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-07 21:53 - 2013-11-07 21:50 - 00000000 ____D C:\AdwCleaner
2013-11-07 21:53 - 2013-03-24 17:14 - 00000000 ____D C:\Users\Attila\AppData\Roaming\Uniblue
2013-11-07 21:53 - 2013-03-24 17:14 - 00000000 ____D C:\Program Files\Uniblue
2013-11-07 21:50 - 2013-11-07 21:50 - 01073262 _____ C:\Users\Attila\Desktop\AdwCleaner(1).exe
2013-11-07 21:49 - 2013-11-07 21:49 - 01073262 _____ C:\Users\Attila\Desktop\AdwCleaner.exe
2013-11-07 21:48 - 2013-11-07 21:46 - 00002325 _____ C:\VEW.txt
2013-11-07 21:19 - 2013-11-06 06:04 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-07 21:18 - 2009-06-30 17:34 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-07 21:16 - 2012-08-04 17:08 - 00000000 ____D C:\Users\Attila\AppData\Local\TSVNCache
2013-11-07 21:16 - 2006-11-02 07:59 - 00126428 _____ C:\Windows\PFRO.log
2013-11-07 20:25 - 2013-11-07 20:25 - 00061440 _____ ( ) C:\Users\Attila\Desktop\VEW.exe
2013-11-07 19:59 - 2012-04-21 17:03 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-07 13:10 - 2009-02-04 13:51 - 00000868 _____ C:\Windows\Tasks\Google Software Updater.job
2013-11-06 20:00 - 2011-05-19 21:46 - 00000000 ____D C:\Users\Attila\AppData\Roaming\TS3Client
2013-11-06 18:11 - 2013-11-06 18:11 - 01669632 _____ C:\Users\Attila\Desktop\SteamInstall.msi
2013-11-05 20:28 - 2013-11-05 20:28 - 00000000 ____D C:\Windows\system32\appmgmt
2013-11-03 15:24 - 2013-11-03 15:24 - 00000000 ____D C:\Program Files\Common Files\Overwolf
2013-11-03 15:24 - 2013-09-10 16:18 - 00000000 ____D C:\Program Files\Overwolf
2013-11-03 15:06 - 2013-10-07 11:51 - 00000000 ____D C:\Users\Administrator\AppData\Local\LogMeIn Hamachi
2013-11-03 15:05 - 2013-10-07 11:50 - 00000946 _____ C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2013-11-03 07:59 - 2013-11-03 07:59 - 00108866 _____ C:\Users\Attila\Desktop\OTL.Txt
2013-11-03 07:34 - 2013-11-03 07:34 - 00602112 _____ (OldTimer Tools) C:\Users\Attila\Desktop\OTL.exe
2013-11-03 03:36 - 2013-11-03 03:36 - 00000000 ____D C:\ProgramData\Overwolf
2013-10-27 19:46 - 2013-07-05 19:38 - 00000212 _____ C:\Users\Attila\AppData\Roaming\Lucid_player_profiles_data.dat
2013-10-27 19:46 - 2013-07-05 19:38 - 00000008 _____ C:\Users\Attila\AppData\Roaming\Lucid_player_highscore.dat
2013-10-26 08:43 - 2011-05-19 21:42 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-10-24 18:50 - 2011-07-28 20:31 - 00000000 ____D C:\Users\Attila\AppData\Roaming\.minecraft
2013-10-23 19:34 - 2009-02-27 19:08 - 00000000 ____D C:\Program Files\Common Files\Steam
2013-10-16 18:41 - 2013-10-16 18:40 - 16090616 _____ (SmartSoft Ltd) C:\Users\Attila\Desktop\SFTPMSI.exe
2013-10-15 18:22 - 2012-09-23 19:21 - 00157606 ____H C:\Windows\MEMORY.DMP
2013-10-10 15:37 - 2013-10-10 15:37 - 00000414 _____ C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
2013-10-10 14:54 - 2013-10-10 14:54 - 00000044 _____ C:\Users\Attila\Desktop\MCADMIN.txt
2013-10-10 14:51 - 2013-10-10 14:48 - 392956213 _____ C:\Users\Attila\Desktop\7DaystoDie(1).zip
2013-10-10 14:47 - 2013-06-30 13:22 - 00000000 ____D C:\Users\Attila\Desktop\Trainers
2013-10-10 07:57 - 2013-10-10 07:51 - 00000000 ____D C:\Users\Public\Documents\stalker-shoc
2013-10-08 18:15 - 2006-11-02 07:51 - 00180257 _____ C:\Windows\setupact.log
2013-10-08 08:54 - 2013-10-06 20:57 - 00002437 _____ C:\Users\Attila\Desktop\iSpy.lnk
2013-10-08 08:54 - 2013-10-06 20:57 - 00000000 ____D C:\Users\Attila\AppData\Roaming\iSpy

Files to move or delete:
====================
C:\ProgramData\hash.dat


Some content of TEMP:
====================
C:\Users\Attila\AppData\Local\temp\6583.exe
C:\Users\Attila\AppData\Local\temp\CH.dll
C:\Users\Attila\AppData\Local\temp\CH2.dll
C:\Users\Attila\AppData\Local\temp\Copy.dll
C:\Users\Attila\AppData\Local\temp\java-installer.exe
C:\Users\Attila\AppData\Local\temp\Quarantine.exe
C:\Users\Attila\AppData\Local\temp\sonarinst.exe
C:\Users\Attila\AppData\Local\temp\SRLDetectionLibrary507163397705298489.dll


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-07 22:09

==================== End Of Log ============================
  • 0

#9
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Addition.txt Log:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 31-10-2013
Ran by Attila at 2013-11-07 22:13:28
Running from C:\Users\Attila\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

32 Bit HP CIO Components Installer (Version: 1.0.0)
AaAaAA!!! - A Reckless Disregard for Gravity
Ace of Spades
Adobe AIR (Version: 1.0.4990)
Adobe AIR (Version: 1.0.8.4990)
Adobe Flash Player 11 Plugin (Version: 11.7.700.224)
Adobe Reader X (10.1.7) (Version: 10.1.7)
AIM Toolbar
AIO_Scan (Version: 90.0.222.000)
Alan Wake
Alice: Madness Returns
Alien Breed 2: Assault
Alien Breed: Impact
Aliens vs. Predator
Amazon Games & Software Downloader (Version: 2.0.2.0)
Amazon MP3 Downloader 1.0.10
AMD APP SDK Runtime (Version: 10.0.1084.4)
AMD Catalyst Install Manager (Version: 8.0.903.0)
Amnesia: The Dark Descent
And Yet It Moves
Anno 2070
Anomaly Warzone Earth
Apple Mobile Device Support (Version: 2.4.0.27)
Apple Software Update (Version: 2.1.1.116)
Aquaria
Arcadia
Arma 2: Operation Arrowhead Beta
ATI Catalyst Registration (Version: 3.00.0000)
Atom Zombie Smasher
Audiosurf
AutoHotkey 1.0.48.05 (Version: 1.0.48.05)
Autonomous Prototype
Awesomenauts
Back to the Future: Ep 2 - Get Tannen!
Back to the Future: Ep 3 - Citizen Brown
Back to the Future: Ep 4 - Double Visions
Back to the Future: Ep 5 - OUTATIME
Batman: Arkham Asylum GOTY Edition
Battlefield 4™ Beta (Version: 1.0.0.0)
Battlefield: Bad Company™ 2 (Version: 1.0.0.0)
BattleForge™ (Version: 1.0.0.0)
Battlelog Web Plugins (Version: 2.3.0)
Beat Hazard
BioShock
BioShock Infinite
BIT.TRIP BEAT
BIT.TRIP CORE
BIT.TRIP FATE
BIT.TRIP Presents... Runner2: Future Legend of Rhythm Alien
BIT.TRIP RUNNER
BIT.TRIP VOID
Black Lake Prototype
Blocks That Matter
Bonjour (Version: 1.0.106)
Borderlands 2
BRAZEN Prototype
BRINK
Browser Address Error Redirector (Version: 1.00.0000)
Brütal Legend
Bully: Scholarship Edition
Burnout Paradise: The Ultimate Box
Business Tools Launcher (Version: 1.00.0000)
Cake Mania
Capsized
Cargo Commander
Castle Crashers
Catalyst Control Center - Branding (Version: 1.00.0000)
Catalyst Control Center (Version: 2012.1219.1521.27485)
Catalyst Control Center Core Implementation (Version: 2008.0512.1133.18639)
Catalyst Control Center Graphics Full Existing (Version: 2008.0512.1133.18639)
Catalyst Control Center Graphics Full New (Version: 2008.0512.1133.18639)
Catalyst Control Center Graphics Light (Version: 2008.0512.1133.18639)
Catalyst Control Center Graphics Previews Common (Version: 2008.0512.1133.18639)
Catalyst Control Center Graphics Previews Common (Version: 2012.1219.1521.27485)
Catalyst Control Center Graphics Previews Vista (Version: 2008.0512.1133.18639)
Catalyst Control Center InstallProxy (Version: 2009.0918.2132.36825)
Catalyst Control Center InstallProxy (Version: 2009.0925.1707.28889)
Catalyst Control Center InstallProxy (Version: 2012.1219.1521.27485)
Catalyst Control Center Localization All (Version: 2012.1219.1521.27485)
Cave Story+
CCC Help Chinese Standard (Version: 2012.1219.1520.27485)
CCC Help Chinese Traditional (Version: 2012.1219.1520.27485)
CCC Help Czech (Version: 2012.1219.1520.27485)
CCC Help Danish (Version: 2012.1219.1520.27485)
CCC Help Dutch (Version: 2012.1219.1520.27485)
CCC Help English (Version: 2008.0512.1132.18639)
CCC Help English (Version: 2012.1219.1520.27485)
CCC Help Finnish (Version: 2012.1219.1520.27485)
CCC Help French (Version: 2012.1219.1520.27485)
CCC Help German (Version: 2012.1219.1520.27485)
CCC Help Greek (Version: 2012.1219.1520.27485)
CCC Help Hungarian (Version: 2012.1219.1520.27485)
CCC Help Italian (Version: 2012.1219.1520.27485)
CCC Help Japanese (Version: 2012.1219.1520.27485)
CCC Help Korean (Version: 2012.1219.1520.27485)
CCC Help Norwegian (Version: 2012.1219.1520.27485)
CCC Help Polish (Version: 2012.1219.1520.27485)
CCC Help Portuguese (Version: 2012.1219.1520.27485)
CCC Help Russian (Version: 2012.1219.1520.27485)
CCC Help Spanish (Version: 2012.1219.1520.27485)
CCC Help Swedish (Version: 2012.1219.1520.27485)
CCC Help Thai (Version: 2012.1219.1520.27485)
CCC Help Turkish (Version: 2012.1219.1520.27485)
ccc-utility (Version: 2008.0512.1133.18639)
ccc-utility (Version: 2012.1219.1521.27485)
Cheat Engine 6.0
Company of Heroes (New Steam Version)
Company of Heroes: Opposing Fronts
Company of Heroes: Tales of Valor
Core Temp 1.0 RC4 (Version: 1.0)
Costume Quest
Counter-Strike: Source
Crayon Physics Deluxe
Crysis 2 Maximum Edition
Crysis Warhead
Crysis Wars
Curse Client (HKCU Version: 4.0.1.286)
Darksiders
DarksidersInstaller (Version: 1.00.1000)
DayZ Commander (Version: 0.9.127)
DC Universe Online
Dead Island
Dead Rising 2
Dead Rising 2 (Version: 1.0.0002.130)
Dead Space
Debut Video Capture Software
Dell Getting Started Guide (Version: 1.00.0000)
Dell Support Center (Support Software) (Version: 2.2.09085)
Deus Ex: Human Revolution
Diablo III (Version: 1.0.2.9950)
Dishonored
DisplayFusion 5.0 (Version: 5.0.0.0)
DivX Setup (Version: 2.6.1.24)
DNA (HKCU Version: 2.2.4 (16502))
Don't Starve
Dota 2
Dungeon Defenders
Dungeon Hearts
Dungeons of Dredmor
Dust: An Elysian Tail
Dynamite Jack
ESET Online Scanner v3
ESN Sonar (Version: 0.70.4)
Eufloria
EVE Online (remove only)
F.E.A.R. 2: Project Origin
F.E.A.R.: Extraction Point
F.E.A.R.: Perseus Mandate
Fable III
Fallout 3
Fax (Version: 90.0.146.000)
From Dust
FTL: Faster Than Light
GameSpy Comrade (Version: 1.5.0.156)
Garry's Mod
Gatling Gears
GIMP 2.6.7
Google Desktop (Version: 5.9.1005.12335)
Google Earth (Version: 7.1.1.1888)
Google Toolbar for Internet Explorer (Version: 1.0.0)
Google Toolbar for Internet Explorer (Version: 7.5.4209.2358)
Google Update Helper (Version: 1.3.21.165)
Google Updater (Version: 2.4.2432.1652)
Grand Theft Auto III
Grand Theft Auto: San Andreas
Grand Theft Auto: Vice City
Gratuitous Space Battles
Guild Wars 2
Half-Life 2
Happy Song Prototype
Hardware Helper (Version: 11.0)
Hotline Miami
HP Photosmart All-In-One Software 9.0 (Version: 9.0)
Intel® Graphics Media Accelerator Driver
Intrusion 2
iSpy (Version: 5.5.0)
iTunes (Version: 8.1.0.52)
Jamestown
Java 7 Update 25 (Version: 7.0.250)
Java Auto Updater (Version: 2.1.9.5)
Java™ 6 Update 7 (Version: 1.6.0.70)
Jawbone Updater (Version: 0.1)
Judge Dredd: Dredd vs Death
Just Cause 2
Killing Floor
L.A. Noire
Lead and Gold - Gangs of the Wild West
League of Legends (Version: 3.0.0)
Left 4 Dead
Left 4 Dead 2
LIMBO
Little Inferno
Logitech Gaming Software 8.12 (Version: 8.12.030)
LogMeIn (Version: 4.0.982)
LogMeIn Hamachi (Version: 2.1.0.362)
Lucid
Magicka
Malwarebytes Anti-Malware version 1.75.0.1300 (Version: 1.75.0.1300)
Mass Effect
Mass Effect 2
Medal of Honor™ Multiplayer
Medal of Honor™ Single Player
Metro 2033
Microsoft .NET Framework 1.1 (Version: 1.1.4322)
Microsoft .NET Framework 1.1 Security Update (KB2698023)
Microsoft .NET Framework 1.1 Security Update (KB2742597)
Microsoft .NET Framework 1.1 Security Update (KB979906)
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1 (Version: 3.5.30729)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
Microsoft Games for Windows - LIVE Redistributable (Version: 3.5.92.0)
Microsoft Games for Windows Marketplace (Version: 3.5.50.0)
Microsoft Security Client (Version: 4.3.0216.0)
Microsoft Security Essentials (Version: 4.3.216.0)
Microsoft Silverlight (Version: 5.1.20125.0)
Microsoft VC9 runtime libraries (Version: 1.0.0)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.50727.42)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.59193)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (Version: 9.0.30729.5570)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (Version: 11.0.51106.1)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
Microsoft XNA Framework Redistributable 3.1 (Version: 3.1.10527.0)
Microsoft XNA Framework Redistributable 4.0 Refresh (Version: 4.0.30901.0)
Mirror's Edge
MotoHelper MergeModules (Version: 1.2.0)
Motorola Mobile Drivers Installation 5.1.0 (Version: 5.1.0)
Move Media Player
Mozilla Firefox 25.0 (x86 en-US) (Version: 25.0)
Mozilla Maintenance Service (Version: 25.0)
MSXML 4.0 SP2 (KB927978) (Version: 4.20.9841.0)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0)
NCH Toolbox
Netflix in Windows Media Center (Version: 2.0.0.0)
NightSky
No More Room in [bleep]
NVIDIA PhysX (Version: 9.12.1031)
Oil Rush
On the Rain-Slick Precipice of Darkness, Episode One
On the Rain-Slick Precipice of Darkness, Episode Two
ooVoo (Version: 3.5.9060)
OpenOffice.org 3.1 (Version: 3.1.9420)
Orcs Must Die! 2
Organ Trail: Director's Cut
Origin (Version: 9.3.7.2735)
Osmos
Overlord
Overlord II
Overlord: Raising [bleep]
Overwolf (Version: 0.45.266)
Pando Media Booster (Version: 2.3.3.9)
PAYDAY 2
Penumbra: Black Plague
Penumbra: Overture
Penumbra: Requiem
Personal Entertainment Launcher (Version: 1.00.0000)
Pid
Pinball FX2
Poker Night 2
Poker Night at the Inventory
Portal
Portal 2
PowerDVD (Version: 8.0)
POWERPREP II (Version: 2.00.0000)
Product Support Launcher (Version: 1.00.0000)
PS_AIO_02_Software_min (Version: 90.0.222.000)
Psychonauts
Quantum Conundrum
QuickTime (Version: 7.60.92.0)
Rayman Origins
Razer BlackWidow Ultimate (Version: 1.04.04)
Razer Lachesis (Version: 1.00.0000)
Realtek Ethernet Network Card Diagnostic tool for Windows Vista (Version: 1.00)
Realtek High Definition Audio Driver
Recettear: An Item Shop's Tale
Red Faction: Armageddon
Remember Me
Reus
Rhythm Zone
Rockstar Games Social Club (Version: 1.0.6.1)
Roxio Activation Module (Version: 1.0)
Roxio Creator Audio (Version: 3.5.0)
Roxio Creator BDAV Plugin (Version: 3.5.0)
Roxio Creator Copy (Version: 3.5.0)
Roxio Creator Data (Version: 3.5.0)
Roxio Creator DE (Version: 3.5.0)
Roxio Creator Tools (Version: 3.5.0)
Roxio Express Labeler 3 (Version: 3.2.1)
Roxio Update Manager (Version: 6.0.0)
S.T.A.L.K.E.R.: Shadow of Chernobyl
Saints Row IV
Saints Row: The Third
Sanctum
Sandboxie 3.62 (32-bit) (Version: 3.62)
Scan (Version: 9.0.0.0)
Scribblenauts Unlimited
Seagate Manager Installer (Version: 2.01.0109)
Serious Sam 3: BFE
Serious Sam Classic: The First Encounter
Serious Sam Classic: The Second Encounter
Serious Sam HD: The First Encounter
Serious Sam HD: The Second Encounter
Shadowgrounds: Survivor
Shank
Sid Meier's Civilization IV
SimCity 4 Deluxe
Six Updater (Version: 2.09.7016)
Skullgirls
Skype Toolbars (Version: 1.0.4051)
Skype™ 5.10 (Version: 5.10.116)
Sleeping Dogs™
Sniper Elite V2
Sniper: Ghost Warrior
Solar 2
Sonic & All-Stars Racing Transformed
Sonic CinePlayer Decoder Pack (Version: 4.2.0)
Spore
Spore: Creepy & Cute Parts Pack
Spore: Galactic Adventures
Spybot - Search & Destroy (Version: 1.6.2)
Stacking
StarCraft II (Version: 2.0.4.24944)
Steel Storm: Burning Retribution
Super Hexagon
Super Meat Boy
System Requirements Lab (Version: 4.1.72.0)
System Requirements Lab CYRI (Version: 6.0.7.0)
Team Fortress 2
TeamSpeak 2 RC2 (Version: 2.0.32.60)
TeamSpeak 3 Client (Version: 3.0.13.1)
Terraria
The Binding of Isaac
The Darkness II
The Elder Scrolls V: Skyrim
The Last Remnant
The Lord of the Rings FREE Trial (Version: 1.00.0000)
The Sims™ 3
The Stanley Parable Demo
The Walking Dead
The War Z version alpha (Version: alpha)
The Witcher: Enhanced Edition
Tiny and Big: Grandpa's Leftovers
Titan Quest
Toolbox (Version: 90.0.146.000)
TortoiseSVN 1.7.7.22907 (32 bit) (Version: 1.7.22907)
Trine
Tropico 3 - Steam Special Edition
Ubisoft Game Launcher (Version: 1.0.0.0)
UE3Redist (HKCU Version: 1.00.0000)
UE3Redist (Version: 1.00.0000)
Ultimate Extras sounds from Microsoft® Tinker™
Unity Web Player (HKCU Version: )
Universe Sandbox
Update for Microsoft .NET Framework 3.5 SP1 (KB2836940) (Version: 1)
Update for Microsoft .NET Framework 3.5 SP1 (KB963707) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (Version: 1)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (Version: 1)
Uplink
VC80CRTRedist - 8.0.50727.6195 (Version: 1.2.0)
Ventrilo Client (Version: 3.0.5)
Voxatron 0.1.3 (Version: 0.1.3)
VVVVVV
War Inc Battlezone version 1.0.0 (Version: 1.0.0)
Warframe (Version: 1.0.0)
Windows Live ID Sign-in Assistant (Version: 6.500.3165.0)
Windows Media Player Firefox Plugin (Version: 1.0.0.8)
Windows Sound Schemes
WinPcap 4.1.2 (Version: 4.1.0.2001)
WinRAR archiver
Wireshark 1.4.0 (Version: 1.4.0)
World of Goo
World of Warcraft (Version: 4.0.3.13329)
XCOM: Enemy Unknown
Yahoo! Detect
Zeno Clash
ZumoCast

==================== Restore Points =========================

19-10-2013 07:00:11 Windows Update
20-10-2013 07:00:13 Windows Update
20-10-2013 08:00:12 Windows Backup
21-10-2013 07:00:11 Windows Update
22-10-2013 07:00:13 Windows Update
23-10-2013 07:00:11 Windows Update
24-10-2013 07:00:11 Windows Update
25-10-2013 04:00:10 Scheduled Checkpoint
25-10-2013 07:00:13 Windows Update
26-10-2013 07:00:12 Windows Update
27-10-2013 06:34:57 Scheduled Checkpoint
27-10-2013 07:00:13 Windows Update
27-10-2013 08:00:20 Windows Backup
28-10-2013 07:00:11 Windows Update
29-10-2013 04:33:34 Scheduled Checkpoint
29-10-2013 07:00:14 Windows Update
30-10-2013 04:33:47 Scheduled Checkpoint
30-10-2013 07:00:12 Windows Update
31-10-2013 04:00:10 Scheduled Checkpoint
31-10-2013 07:00:12 Windows Update
01-11-2013 04:04:03 Scheduled Checkpoint
01-11-2013 07:00:14 Windows Update
02-11-2013 04:39:53 Scheduled Checkpoint
02-11-2013 07:00:12 Windows Update
03-11-2013 04:00:15 Scheduled Checkpoint
03-11-2013 07:00:15 Windows Update
03-11-2013 08:00:12 Windows Update
03-11-2013 12:41:19 Windows Backup
04-11-2013 08:00:10 Windows Update
05-11-2013 08:00:11 Windows Update
06-11-2013 00:30:55 Removed Steam
06-11-2013 08:00:11 Windows Update
06-11-2013 23:15:06 Installed Steam
07-11-2013 08:00:11 Windows Update

==================== Hosts content: ==========================

2006-11-02 05:23 - 2013-06-22 06:43 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {075F7B0C-8858-426A-81EA-5161F4D13E82} - System32\Tasks\Microsoft\Windows\Shell\CrawlStartPages
Task: {2EF1A2C3-210D-4AFD-BEB7-E51E7FD69C0C} - System32\Tasks\Microsoft\Windows\MobilePC\TMM
Task: {3A950610-5351-4CF3-89BD-526A7E64AA8B} - System32\Tasks\Microsoft\Windows\Wireless\GatherWirelessInfo => C:\Windows\System32\gatherWirelessInfo.vbs [2008-01-20] ()
Task: {3C65C1AC-A5EB-4BDF-A6D7-32574393217B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-04] (Google Inc.)
Task: {5096D119-845B-4A52-872A-DB00AEB4FCA1} - \dsmonitor No Task File
Task: {55531D98-38BF-4D5F-AA6A-34A10F8B643D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30] (Apple Inc.)
Task: {5802374E-00DE-4DEB-AB19-C3FAD9F0E60B} - \Updater21804.exe No Task File
Task: {5A6D9831-D95C-4713-B4E9-F03D1644498F} - System32\Tasks\Microsoft\Windows\RAC\RACAgent => C:\Windows\System32\RacAgent.exe [2008-01-20] (Microsoft Corporation)
Task: {73F104A8-1646-48DF-8703-88022E3DD93B} - System32\Tasks\Core Temp Autostart Attila => C:\Program Files\Core Temp\Core Temp.exe [2012-10-14] ()
Task: {74DEF101-0FD4-4826-A858-11A4AD8B3C3C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-04] (Google Inc.)
Task: {88DBC835-85AE-466E-9958-9C4035714D09} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-16] (Adobe Systems Incorporated)
Task: {AF585E40-A42D-4A8F-9786-6CA15836E266} - System32\Tasks\{D473D49F-73CE-4507-9C66-2DF556654927} => C:\Program Files\Skype\Phone\Skype.exe [2012-07-13] (Skype Technologies S.A.)
Task: {B25D4244-6254-4542-9A54-D5A933EC915A} - System32\Tasks\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-02-02 22:22 - 2012-12-19 14:30 - 00037376 _____ () C:\Windows\system32\atitmpxx.dll
2012-05-15 11:54 - 2012-05-15 11:54 - 00070536 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00086016 _____ () C:\Program Files\Logitech Gaming Software\plugins\DevMgr-8.12.077\DevMgr.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00467456 _____ () C:\Program Files\Logitech Gaming Software\plugins\MainUI-8.12.179\MainUI.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00088064 _____ () C:\Program Files\Logitech Gaming Software\plugins\DevBusBulk-8.12.076\DevBusBulk.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00090112 _____ () C:\Program Files\Logitech Gaming Software\plugins\DevBusHid-8.12.078\DevBusHid.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00070656 _____ () C:\Program Files\Logitech Gaming Software\plugins\SimInput-8.12.068\SimInput.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00189952 _____ () C:\Program Files\Logitech Gaming Software\plugins\G13Device-8.12.155\G13Device.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00206336 _____ () C:\Program Files\Logitech Gaming Software\plugins\G19Device-8.12.147\G19Device.dll
2011-12-19 20:37 - 2011-12-19 20:37 - 00026112 _____ () C:\Program Files\Logitech Gaming Software\plugins\PnpGamePanelDevices-8.12.049\PnpGamePanelDevices.dll
2013-02-12 21:38 - 2013-02-12 21:38 - 00100688 _____ () C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
2010-03-10 21:34 - 2005-10-07 15:05 - 00125440 _____ () C:\Program Files\WinRAR\rarext.dll
2013-11-06 06:04 - 2013-11-06 06:04 - 03368048 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-06-11 13:00 - 2013-06-16 11:28 - 16033160 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================

System errors:
=============

Microsoft Office Sessions:
=========================

CodeIntegrity Errors:
===================================
Date: 2013-06-21 18:20:37.603
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:37.380
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:37.157
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:36.932
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\Backup\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:36.709
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:36.485
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:36.262
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:36.038
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:35.814
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-06-21 18:20:35.493
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Microsoft Security Client\Drivers\NisDrv\NisDrvWFP.sys because the set of per-page image hashes could not be found on the system.


==================== Memory info ===========================

Percentage of memory in use: 46%
Total physical RAM: 3325.27 MB
Available physical RAM: 1762.86 MB
Total Pagefile: 6889.52 MB
Available Pagefile: 4969.72 MB
Total Virtual: 2047.88 MB
Available Virtual: 1895.86 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:288.03 GB) (Free:48.85 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVERY) (Fixed) (Total:10 GB) (Free:3.9 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: 98000000)
Partition 1: (Not Active) - (Size=63 MB) - (Type=DE)
Partition 2: (Not Active) - (Size=10 GB) - (Type=07 NTFS)
Partition 3: (Active) - (Size=288 GB) - (Type=07 NTFS)

==================== End Of Log ============================
  • 0

#10
RKinner

RKinner

    Malware Expert

  • Expert
  • 24,701 posts
  • MVP
Download the attached fixlist.txt to the same location as FRST
Run FRST and press Fix
A fix log will be generated please post that .


Download, Save and Run (win 7 or Vista => Right click and Run as Admin.) farbar service scanner

Posted Image

Tick "All" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

The SFC is normal for Vista. Nothing wrong that I can see there.

Did I miss the Speccy log?

I'm a little worried that the disk check won't run. Will know more once I see the Speccy log.


Download aswMBR.exe to your desktop.
Right click aswMBR.exe and Run as Administrator
uncheck trace disk IO calls
Click the "Scan" button to start scan (Accept the Avast Engine)
On completion of the scan if the Fix button is enabled (not the FixMBR button) press it and then run a new scan and click save log, save it to your desktop and post in your next reply
If the Fix button is not enabled then just click save log, save it to your desktop and post in your next reply

ComboFix

:!: It must be saved to your desktop, do not run it from your browser:!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Rightclick on ComboFix and select Run As Administrator to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix.

A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.


Download TDSSKiller:
http://support.kaspe.../tdsskiller.exe
Save it to your desktop then run it by right clicking and Run As Admin.


If TDSSKiller alerts you that the system needs to reboot, please consent.

Run TDSSKiller again but this time:
before you hit the Scan hit Change Parameters and check the two items under Additional Options. OK then Scan.
In this mode it is prone to false positives so do not change the SKIP option to DELETE unless it says TDSS.
When done, a log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.



Malwarebytes' Anti-Malware
:!: If you have a previous version of MalwareBytes', remove it via Add or Remove Programs and download a fresh copy. :!:
http://www.malwareby...lwarebytes_free

SAVE Malwarebytes' Anti-Malware to your desktop.

* Right-click mbam-setup.exe and select Run As Administrator to start the program.
* follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.

* Be sure that everything is checked, and click Remove Selected.

* When completed, a log will open in Notepad. Please save it to a convenient location.
* The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
* Post that log back here.
  • 0

Advertisements


#11
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
You didnt miss the Speccy log, havent got there yet, in the process of doing the OTL custom scan, following your directions step by step, on one of the restarts it installed some windows updates! so things are looking a bit more positive. the OTL scan is taking a while, might let it finish over night, getting late here and have work in the AM. Will post all results in the order you set forth in the first post, then work my way through the second. Thanks for all the help so far.
  • 0

#12
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
OTL Log:
OTL logfile created on: 11/7/2013 10:21:16 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Attila\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.25 Gb Total Physical Memory | 1.89 Gb Available Physical Memory | 58.25% Memory free
6.73 Gb Paging File | 5.03 Gb Available in Paging File | 74.80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 288.03 Gb Total Space | 48.85 Gb Free Space | 16.96% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 3.90 Gb Free Space | 38.98% Space Free | Partition Type: NTFS
Drive F: | 1397.26 Gb Total Space | 654.61 Gb Free Space | 46.85% Space Free | Partition Type: NTFS

Computer Name: ATTILA-PC | User Name: Attila | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2013/11/03 07:34:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
PRC - [2013/07/18 15:49:42 | 000,022,216 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013/07/18 15:49:24 | 000,995,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2013/05/15 11:08:44 | 001,435,984 | ---- | M] (LogMeIn Inc.) -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
PRC - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2013/02/12 21:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
PRC - [2013/02/11 15:15:46 | 001,243,024 | ---- | M] (Binary Fortress Software) -- C:\Program Files\DisplayFusion\DisplayFusionService.exe
PRC - [2013/02/11 15:15:36 | 007,203,712 | ---- | M] (Binary Fortress Software) -- C:\Program Files\DisplayFusion\DisplayFusion.exe
PRC - [2012/12/19 14:56:24 | 000,482,304 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2012/12/19 14:55:48 | 000,219,136 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2012/11/29 15:06:36 | 004,137,128 | ---- | M] () -- C:\Program Files\Jawbone\JawboneUpdater.exe
PRC - [2012/05/15 11:54:32 | 000,276,872 | ---- | M] (http://tortoisesvn.net) -- C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
PRC - [2011/11/23 08:17:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) -- C:\Program Files\Sandboxie\SbieSvc.exe
PRC - [2011/09/29 11:16:26 | 000,101,144 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech Gaming Software\LCore.exe
PRC - [2011/05/16 11:30:06 | 000,887,712 | ---- | M] (Razer USA Ltd) -- C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe
PRC - [2010/12/08 12:11:32 | 000,374,152 | ---- | M] (LogMeIn, Inc.) -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe
PRC - [2010/04/30 21:47:47 | 002,938,552 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
PRC - [2009/05/21 10:13:58 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtcmd.exe
PRC - [2009/05/01 13:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe
PRC - [2009/05/01 13:35:10 | 000,185,640 | ---- | M] (Seagate LLC) -- C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe
PRC - [2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009/01/26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/08/14 01:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe
PRC - [2008/02/26 11:57:28 | 000,128,296 | ---- | M] (CyberLink Corp.) -- C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
PRC - [2008/02/01 00:20:22 | 004,706,304 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2007/09/12 10:52:18 | 000,172,032 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razerhid.exe
PRC - [2007/08/28 09:32:24 | 000,143,360 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razertra.exe
PRC - [2007/08/16 16:05:16 | 000,274,432 | ---- | M] (razercfg MFC Application) -- C:\Program Files\Razer\Lachesis\OSD.exe
PRC - [2007/06/05 09:37:12 | 000,163,840 | ---- | M] (Razer Inc.) -- C:\Program Files\Razer\Lachesis\razerofa.exe


========== Modules (No Company Name) ==========

MOD - [2013/11/06 06:04:48 | 003,368,048 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2013/06/20 20:28:45 | 012,156,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web\de0d1e23b3de6010d4608db3dc59f337\System.Web.ni.dll
MOD - [2013/06/20 20:28:35 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\fbc70df7b07a2e9a7b59d26cb4e3b610\System.Runtime.Remoting.ni.dll
MOD - [2013/05/16 02:34:52 | 000,686,592 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\2bc38488f9988db801a844e2590294a3\System.Security.ni.dll
MOD - [2013/05/16 02:34:51 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\3da65115bf9debbf564861f6b123a2e4\System.Configuration.ni.dll
MOD - [2013/05/16 02:32:07 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\e9ea3e70247b4aa4a8b260426db3aa6b\System.Windows.Forms.ni.dll
MOD - [2013/05/16 02:09:20 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\153143f74d840484b510d8cf5187796b\System.Windows.Forms.ni.dll
MOD - [2013/05/16 02:09:15 | 007,069,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\2f9e0112e10f9e70d3430d0be9863976\System.Core.ni.dll
MOD - [2013/02/13 04:03:51 | 011,820,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\421cb77e6a4c21f94e3c5ddf766de23b\System.Web.ni.dll
MOD - [2013/02/12 21:38:06 | 000,100,688 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2013/02/12 21:37:16 | 001,263,952 | ---- | M] () -- C:\Program Files\DivX\DivX Update\DivXUpdate.exe
MOD - [2013/01/10 03:42:14 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\f042f66c2ad8fd5b8c34fa22cd22079e\System.Management.ni.dll
MOD - [2013/01/10 03:36:08 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\b757806657fa5db2b1ed1a89b026b463\System.Xml.ni.dll
MOD - [2013/01/10 03:35:46 | 001,593,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\78157a494dc9a7e52be8840decfcd9cc\System.Drawing.ni.dll
MOD - [2013/01/10 03:34:56 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\cc149d08e75f8c53cd28ac926b38c370\System.ni.dll
MOD - [2013/01/10 03:34:46 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2227d1559f87943255069398608d5c56\mscorlib.ni.dll
MOD - [2013/01/10 03:09:27 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\b573c6a62bb88df0ee2af59b6a8ca910\System.Drawing.ni.dll
MOD - [2013/01/10 03:09:25 | 009,094,656 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\15872842e3e63ddf0f720f406706198e\System.ni.dll
MOD - [2013/01/10 03:09:18 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3f95a6d480ed1ebe45cf27b770ba94ed\mscorlib.ni.dll
MOD - [2012/12/19 14:30:26 | 000,037,376 | ---- | M] () -- C:\Windows\System32\atitmpxx.dll
MOD - [2012/11/29 15:06:36 | 004,137,128 | ---- | M] () -- C:\Program Files\Jawbone\JawboneUpdater.exe
MOD - [2012/05/15 11:54:16 | 000,070,536 | ---- | M] () -- C:\Program Files\TortoiseSVN\bin\libsasl32.dll
MOD - [2011/12/19 20:37:19 | 000,026,112 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\PnpGamePanelDevices-8.12.049\PnpGamePanelDevices.dll
MOD - [2011/12/19 20:37:18 | 000,070,656 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\SimInput-8.12.068\SimInput.dll
MOD - [2011/12/19 20:37:16 | 000,467,456 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\MainUI-8.12.179\MainUI.dll
MOD - [2011/12/19 20:37:09 | 000,206,336 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\G19Device-8.12.147\G19Device.dll
MOD - [2011/12/19 20:37:09 | 000,189,952 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\G13Device-8.12.155\G13Device.dll
MOD - [2011/12/19 20:37:07 | 000,086,016 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevMgr-8.12.077\DevMgr.dll
MOD - [2011/12/19 20:37:06 | 000,090,112 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevBusHid-8.12.078\DevBusHid.dll
MOD - [2011/12/19 20:37:06 | 000,088,064 | ---- | M] () -- C:\Program Files\Logitech Gaming Software\plugins\DevBusBulk-8.12.076\DevBusBulk.dll
MOD - [2010/04/30 21:47:47 | 002,938,552 | ---- | M] () -- C:\Program Files\Pando Networks\Media Booster\PMB.exe
MOD - [2007/09/12 10:52:18 | 000,172,032 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razerhid.exe
MOD - [2007/08/28 09:32:24 | 000,143,360 | ---- | M] () -- C:\Program Files\Razer\Lachesis\razertra.exe
MOD - [2005/10/07 15:05:32 | 000,125,440 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Services (SafeList) ==========

SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - [2013/11/06 06:05:07 | 000,119,408 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013/10/30 14:25:56 | 000,566,696 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2013/10/23 11:53:56 | 000,018,360 | ---- | M] (Overwolf Ltd) [On_Demand | Stopped] -- C:\Program Files\Overwolf\OverwolfUpdater.exe -- (OverwolfUpdaterService)
SRV - [2013/07/18 15:49:42 | 000,295,376 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013/07/18 15:49:42 | 000,022,216 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2013/06/16 11:29:00 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/05/15 11:08:44 | 001,435,984 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2013/04/04 13:50:32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 13:50:32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2013/02/11 21:57:36 | 000,049,152 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files\Common Files\BattlEye\BEService.exe -- (BEService)
SRV - [2013/02/11 15:15:46 | 001,243,024 | ---- | M] (Binary Fortress Software) [Auto | Running] -- C:\Program Files\DisplayFusion\DisplayFusionService.exe -- (DisplayFusionService)
SRV - [2012/12/19 14:55:48 | 000,219,136 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2012/07/13 12:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011/11/23 08:17:10 | 000,072,976 | ---- | M] (SANDBOXIE L.T.D) [Auto | Running] -- C:\Program Files\Sandboxie\SbieSvc.exe -- (SbieSvc)
SRV - [2011/04/27 17:41:54 | 000,136,584 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\ramaint.exe -- (LMIMaint)
SRV - [2011/04/27 17:41:50 | 000,390,528 | ---- | M] (LogMeIn, Inc.) [Disabled | Stopped] -- C:\Program Files\LogMeIn\x86\LogMeIn.exe -- (LogMeIn)
SRV - [2010/12/08 12:11:32 | 000,374,152 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files\LogMeIn\x86\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2010/06/25 12:07:20 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd)
SRV - [2009/10/23 11:31:44 | 000,401,920 | ---- | M] (Amazon.com) [On_Demand | Stopped] -- C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderService.exe -- (Amazon Download Agent)
SRV - [2009/05/01 13:35:54 | 000,181,544 | ---- | M] (Seagate Technology LLC) [Auto | Running] -- C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe -- (FreeAgentGoNext Service)
SRV - [2008/08/14 01:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter)
SRV - [2008/01/20 21:21:41 | 000,272,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleXNt.sys -- (EagleXNt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\ComboFix\catchme.sys -- (catchme)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2013/06/18 20:50:08 | 000,107,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2013/04/04 13:50:32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2012/12/19 15:47:46 | 009,647,104 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2012/12/19 14:32:06 | 000,442,368 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2012/11/29 14:54:54 | 000,042,592 | ---- | M] (http://libusb-win32.sourceforge.net) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\libusb0.sys -- (libusb0)
DRV - [2012/09/02 17:03:50 | 000,125,824 | ---- | M] (SANDBOXIE L.T.D) [Kernel | On_Demand | Running] -- C:\Program Files\Sandboxie\SbieDrv.sys -- (SbieDrv)
DRV - [2012/02/23 07:31:36 | 000,083,984 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtihdLH3.sys -- (AtiHDAudioService)
DRV - [2011/12/19 20:37:18 | 000,019,720 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGBusEnum.sys -- (LGBusEnum)
DRV - [2011/12/19 20:37:18 | 000,014,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LGVirHid.sys -- (LGVirHid)
DRV - [2011/12/19 20:37:05 | 000,378,568 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfGSCi386.sys -- (LADF_CaptureOnly)
DRV - [2011/12/19 20:37:05 | 000,317,384 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfGSRi386.sys -- (LADF_RenderOnly)
DRV - [2011/05/12 16:59:46 | 000,124,672 | ---- | M] (Razer USA Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RzSynapse.sys -- (RzSynapse)
DRV - [2011/04/27 17:41:47 | 000,083,360 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\System32\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV - [2010/06/25 12:07:14 | 000,035,088 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2009/05/28 10:07:14 | 000,334,992 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfSBVMi386.sys -- (LADF_SBVM)
DRV - [2009/05/28 10:07:14 | 000,053,520 | ---- | M] (Logitech) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ladfDHP2i386.sys -- (LADF_DHP2)
DRV - [2009/03/18 17:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008/08/11 12:41:00 | 000,047,640 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV - [2008/08/11 12:41:00 | 000,012,856 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files\LogMeIn\x86\rainfo.sys -- (LMIInfo)
DRV - [2008/03/07 00:46:56 | 000,027,648 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\RtNdPt60.sys -- (RtNdPt60)
DRV - [2008/02/02 23:50:06 | 000,106,496 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008/01/20 21:21:33 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)
DRV - [2007/08/08 10:04:16 | 000,012,032 | ---- | M] (Razer (Asia-Pacific) Pte Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Lachesis.sys -- (LachesisFltr)
DRV - [2006/11/02 02:30:56 | 000,047,104 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\URLSearchHook: {03402f96-3dc7-4285-bc50-9e81fefafe43} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...ie7&rlz=1I7DKUS

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...ms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Bing"
FF - prefs.js..browser.search.selectedEngine: "Bing"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.com"
FF - prefs.js..extensions.enabledAddons: %7B23fcfd51-4958-4f00-80a3-ae97e717ed8b%7D:2.1.2.172
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20131030
FF - prefs.js..extensions.enabledAddons: djziggy%40gmail.com:2.1.1
FF - prefs.js..extensions.enabledItems: {d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}:1.0.0.1
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0.608
FF - prefs.js..extensions.enabledItems: [email protected]:7
FF - prefs.js..extensions.enabledItems: {8ed952a0-199c-11d9-9669-0800200c9a66}:1.5.3
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.3.0: C:\Program Files\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.25.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Attila\AppData\Roaming\Move Networks\plugins\npqmp071503000010.dll (Move Networks)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Attila\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013/03/24 17:17:46 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/11/06 06:04:42 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 25.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013/11/06 06:04:44 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Users\Attila\AppData\Roaming\Move Networks [2009/11/03 20:05:10 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{d5bc46d8-67c7-11dc-8c1d-0097498c2b7a}: C:\Users\Attila\Program Files\DNA

[2009/03/16 20:14:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Extensions
[2009/03/16 20:14:40 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Extensions\[email protected]
[2013/10/31 20:07:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions
[2010/06/28 19:51:31 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012/02/20 18:22:45 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}(235)
[2010/03/09 00:26:11 | 000,000,000 | ---D | M] ("Unlinker") -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{8ed952a0-199c-11d9-9669-0800200c9a66}
[2013/10/31 20:07:05 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2013/09/27 18:18:07 | 000,000,000 | ---D | M] (LavaFox V2-Blue) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/09/27 16:03:25 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2011/03/07 21:17:25 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/09/27 16:03:26 | 000,000,000 | ---D | M] (LavaFox V2-Green) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/10/24 18:44:34 | 002,737,915 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\[email protected]
[2013/08/02 20:06:05 | 000,224,035 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
[2013/10/09 16:00:51 | 000,915,554 | ---- | M] () (No name found) -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2009/12/20 13:21:58 | 000,004,546 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search-1.xml
[2009/10/09 09:56:20 | 000,004,207 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Mozilla\Firefox\Profiles\g70ha1li.default\searchplugins\aim-search.xml
[2013/11/07 21:53:48 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2013/11/06 06:04:43 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2013/11/06 06:04:42 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\browser\extensions
[2013/11/06 06:05:08 | 000,000,000 | ---D | M] (Default) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/03/24 17:17:46 | 000,000,000 | ---D | M] (No name found) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5
[2007/04/16 12:07:12 | 000,180,293 | ---- | M] () -- C:\Program Files\mozilla firefox\plugins\npViewpoint.dll
[2011/05/12 05:47:24 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml.old

O1 HOSTS File: ([2013/06/22 06:43:00 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AIM Toolbar Loader) - {b0cda128-b425-4eef-a174-61a11ac5dbf8} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll (Dell Inc.)
O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (AIM Toolbar) - {61539ecd-cc67-4437-a03c-9aaccbd14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O3 - HKCU\..\Toolbar\WebBrowser: (AIM Toolbar) - {61539ECD-CC67-4437-A03C-9AACCBD14326} - C:\Program Files\AIM Toolbar\aimtb.dll (AOL LLC.)
O4 - HKLM..\Run: [AmazonGSDownloaderTray] C:\Program Files\Amazon\Amazon Games & Software Downloader\AmazonGSDownloaderTray.exe (Amazon.com)
O4 - HKLM..\Run: [ATICustomerCare] C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [Lachesis] C:\Program Files\Razer\Lachesis\razerhid.exe ()
O4 - HKLM..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogMeIn GUI] C:\Program Files\LogMeIn\x86\LogMeInSystray.exe (LogMeIn, Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [MaxMenuMgr] C:\Program Files\Seagate\SeagateManager\FreeAgent Status\StxMenuMgr.exe (Seagate LLC)
O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Razer Blackwidow Driver] C:\Program Files\Razer\BlackWidow Ultimate\BlackWidowUltimateTray.exe (Razer USA Ltd)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKCU..\Run: [DisplayFusion] C:\Program Files\DisplayFusion\DisplayFusion.exe (Binary Fortress Software)
O4 - HKCU..\Run: [EADM] C:\Program Files\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [Overwolf] C:\Program Files\Overwolf\Overwolf.exe (Overwolf)
O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files\Pando Networks\Media Booster\PMB.exe ()
O4 - HKCU..\Run: [SandboxieControl] C:\Program Files\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launch Jawbone Updater.lnk = C:\Program Files\Jawbone\LaunchJU.exe ()
O4 - Startup: C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Activities present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.7.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 10.25.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 167.206.254.1 167.206.254.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C2F540FB-26F5-4DB6-8E0A-2F17E1778D36}: DhcpNameServer = 167.206.254.1 167.206.254.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C497BC71-2AD7-4650-A3C8-8D0A38E6AA43}: DhcpNameServer = 167.206.254.2 167.206.254.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~3\GOOGLEDESKTOPNETWORK3.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - AppInit_DLLs: (C:\PROGRA~1\GOOGLE\GOOGLE~3\GOEC62~1.DLL) - C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Attila\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Attila\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2013/06/22 07:00:31 | 000,000,067 | ---- | M] () - F:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: MsMpSvc - C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: Hamachi2Svc - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: MsMpSvc - C:\Program Files\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} -
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 11.0
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} -
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6C298884-91FD-408C-9D90-5A59D2C29FD1} - Microsoft .NET Framework 1.1 Security Update (KB2742597)
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7070D8E0-650A-46b3-B03C-9497582E6A74} - %SystemRoot%\system32\soundschemes.exe /AddRegistration
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8F736E10-8E5C-4399-A532-D0C00A406227} - Microsoft .NET Framework 1.1 Security Update (KB2698023)
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {B3688A53-AB2A-4b1d-8CEF-8F93D8C51C24} - %SystemRoot%\system32\soundschemes2.exe /AddRegistration
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\Windows\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP

Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.lhacm - C:\Windows\System32\lhacm.acm (Microsoft Corporation)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.DIVX - C:\Windows\System32\DivX.dll (DivX, Inc.)
Drivers32: vidc.VP60 - C:\Windows\system32\vp6vfw.dll File not found
Drivers32: vidc.VP61 - C:\Windows\system32\vp6vfw.dll File not found
Drivers32: vidc.yv12 - C:\Windows\System32\DivX.dll (DivX, Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/11/07 22:23:48 | 002,799,296 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\Users\Attila\Desktop\procexp.exe
[2013/11/07 22:12:39 | 000,000,000 | ---D | C] -- C:\FRST
[2013/11/07 22:12:03 | 001,089,445 | ---- | C] (Farbar) -- C:\Users\Attila\Desktop\FRST.exe
[2013/11/07 22:01:26 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT
[2013/11/07 21:59:31 | 001,034,531 | ---- | C] (Thisisu) -- C:\Users\Attila\Desktop\JRT.exe
[2013/11/07 21:50:20 | 000,000,000 | ---D | C] -- C:\AdwCleaner
[2013/11/06 06:04:42 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/11/05 20:28:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2013/11/03 15:24:39 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Overwolf
[2013/11/03 15:24:28 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2013/11/03 07:34:43 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
[2013/11/03 03:36:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Overwolf
[2013/10/16 18:40:53 | 016,090,616 | ---- | C] (SmartSoft Ltd) -- C:\Users\Attila\Desktop\SFTPMSI.exe
[2013/10/10 07:51:00 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\stalker-shoc

========== Files - Modified Within 30 Days ==========

[2013/11/07 22:23:52 | 002,799,296 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\Users\Attila\Desktop\procexp.exe
[2013/11/07 22:23:33 | 000,649,260 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/11/07 22:23:33 | 000,122,770 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/11/07 22:12:03 | 001,089,445 | ---- | M] (Farbar) -- C:\Users\Attila\Desktop\FRST.exe
[2013/11/07 22:03:55 | 000,000,882 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013/11/07 22:03:47 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013/11/07 22:03:47 | 000,003,616 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013/11/07 22:03:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/11/07 22:03:04 | 3487,748,096 | -HS- | M] () -- C:\hiberfil.sys
[2013/11/07 21:59:41 | 001,034,531 | ---- | M] (Thisisu) -- C:\Users\Attila\Desktop\JRT.exe
[2013/11/07 21:50:12 | 001,073,262 | ---- | M] () -- C:\Users\Attila\Desktop\AdwCleaner(1).exe
[2013/11/07 21:49:22 | 001,073,262 | ---- | M] () -- C:\Users\Attila\Desktop\AdwCleaner.exe
[2013/11/07 21:18:01 | 000,000,886 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013/11/07 20:25:27 | 000,061,440 | ---- | M] ( ) -- C:\Users\Attila\Desktop\VEW.exe
[2013/11/07 19:59:59 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/11/07 13:10:00 | 000,000,868 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2013/11/06 18:11:25 | 001,669,632 | ---- | M] () -- C:\Users\Attila\Desktop\SteamInstall.msi
[2013/11/03 07:34:43 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Attila\Desktop\OTL.exe
[2013/10/27 19:46:08 | 000,000,008 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_highscore.dat
[2013/10/27 19:46:01 | 000,000,212 | ---- | M] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_profiles_data.dat
[2013/10/16 18:41:03 | 016,090,616 | ---- | M] (SmartSoft Ltd) -- C:\Users\Attila\Desktop\SFTPMSI.exe
[2013/10/15 18:22:06 | 000,157,606 | -H-- | M] () -- C:\Windows\MEMORY.DMP
[2013/10/10 15:37:11 | 000,000,414 | ---- | M] () -- C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
[2013/10/10 14:51:44 | 392,956,213 | ---- | M] () -- C:\Users\Attila\Desktop\7DaystoDie(1).zip

========== Files Created - No Company Name ==========

[2013/11/07 21:50:07 | 001,073,262 | ---- | C] () -- C:\Users\Attila\Desktop\AdwCleaner(1).exe
[2013/11/07 21:49:16 | 001,073,262 | ---- | C] () -- C:\Users\Attila\Desktop\AdwCleaner.exe
[2013/11/07 20:25:30 | 000,061,440 | ---- | C] ( ) -- C:\Users\Attila\Desktop\VEW.exe
[2013/11/06 18:11:32 | 001,669,632 | ---- | C] () -- C:\Users\Attila\Desktop\SteamInstall.msi
[2013/10/10 15:37:11 | 000,000,414 | ---- | C] () -- C:\Users\Attila\Desktop\7DaystoDie(1) - Shortcut.lnk
[2013/10/10 14:48:34 | 392,956,213 | ---- | C] () -- C:\Users\Attila\Desktop\7DaystoDie(1).zip
[2013/07/07 07:46:35 | 000,001,479 | ---- | C] () -- C:\Users\Attila\.recently-used.xbel
[2013/07/05 19:38:25 | 000,000,212 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_profiles_data.dat
[2013/07/05 19:38:25 | 000,000,008 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\Lucid_player_highscore.dat
[2013/06/21 17:21:59 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2013/06/21 17:21:59 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2013/06/21 17:21:58 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2013/06/21 17:21:58 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2013/06/21 17:21:58 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012/12/19 15:45:04 | 000,180,224 | ---- | C] () -- C:\Windows\System32\clinfo.exe
[2012/11/29 10:40:02 | 000,662,786 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2012/09/19 14:09:40 | 000,076,660 | ---- | C] () -- C:\Windows\System32\ativce02.dat
[2012/09/04 10:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik_nd.dat
[2012/09/04 10:20:18 | 000,228,528 | ---- | C] () -- C:\Windows\System32\ativvaxy_cik.dat
[2012/09/02 17:06:21 | 000,002,544 | ---- | C] () -- C:\Windows\Sandboxie.ini
[2012/02/26 10:09:10 | 000,088,198 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\icarus-dxdiag.xml
[2011/12/19 20:37:05 | 000,076,360 | ---- | C] () -- C:\Windows\System32\ladfGSRCoinst_i386.dll
[2011/10/24 20:52:49 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2010/05/01 00:48:51 | 000,000,094 | ---- | C] () -- C:\Users\Attila\AppData\Local\fusioncache.dat
[2010/04/23 23:03:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010/03/11 20:04:19 | 000,976,384 | -HS- | C] () -- C:\Users\Attila\ehthumbs_vista.db
[2010/03/02 22:16:12 | 000,138,904 | ---- | C] () -- C:\Users\Attila\AppData\Roaming\PnkBstrK.sys
[2009/03/07 16:22:55 | 000,008,512 | ---- | C] () -- C:\Users\Attila\AppData\Local\d3d9caps.dat
[2009/01/28 11:31:34 | 000,039,936 | ---- | C] () -- C:\Users\Attila\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

========== ZeroAccess Check ==========

[2006/11/02 07:53:06 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 01:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== Custom Scans ==========

========== Drive Information ==========

Physical Drives
---------------

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed hard disk media
Interface type: IDE
Media Type: Fixed hard disk media
Model: WDC WD3200AAKS-75L9A0 ATA Device
Partitions: 3
Status: OK
Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE1 - External hard disk media
Interface type: USB
Media Type: External hard disk media
Model: Seagate FreeAgent USB Device
Partitions: 1
Status: OK
Status Info: 0

Partitions
---------------

DeviceID: Disk #0, Partition #0
PartitionType: Unknown
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 63.00MB
Starting Offset: 32256
Hidden sectors: 0


DeviceID: Disk #0, Partition #1
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 10.00GB
Starting Offset: 66060288
Hidden sectors: 0


DeviceID: Disk #0, Partition #2
PartitionType: Installable File System
Bootable: True
BootPartition: True
PrimaryPartition: True
Size: 288.00GB
Starting Offset: 10803478528
Hidden sectors: 0


DeviceID: Disk #1, Partition #0
PartitionType: Installable File System
Bootable: False
BootPartition: False
PrimaryPartition: True
Size: 1,397.00GB
Starting Offset: 32256
Hidden sectors: 0


< %SYSTEMDRIVE%\*.exe >

< %systemroot%\assembly\GAC_32\*.ini >

< %systemroot%\assembly\GAC_64\*.ini >

< %SYSTEMDRIVE%\*.exe >

< %ALLUSERSPROFILE%\Application Data\*.exe >

< %APPDATA%\*. >
[2013/10/24 18:50:21 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\.minecraft
[2010/11/28 17:01:31 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Adobe
[2010/05/11 22:06:33 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Amazon
[2009/03/19 18:38:42 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Apple Computer
[2009/01/28 11:01:54 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ATI
[2011/08/07 18:33:54 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\AtomZombieData
[2011/10/08 09:50:26 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Beat Hazard
[2011/07/28 21:50:32 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Broken Rules
[2012/05/26 11:25:12 | 000,000,000 | -HSD | M] -- C:\Users\Attila\AppData\Roaming\Common
[2011/07/28 23:41:34 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Crayon Physics Deluxe
[2010/03/11 22:53:02 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\CyberLink
[2012/07/28 21:43:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DarknessII
[2011/06/15 23:47:03 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DarksporeData
[2013/08/08 04:27:10 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DisplayFusion
[2011/07/08 19:56:52 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DivX
[2013/06/23 12:18:17 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\DNA
[2013/06/08 21:59:49 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Doublefine
[2011/06/25 23:29:31 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\fltk.org
[2011/06/22 00:20:20 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\GetRightToGo
[2009/01/28 11:17:45 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Google
[2013/07/07 07:46:35 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\gtk-2.0
[2009/01/28 11:01:21 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Identities
[2010/08/24 19:48:24 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\InstallShield
[2010/10/31 23:14:30 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\InstallShield Installation Information
[2013/10/08 08:54:50 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\iSpy
[2013/01/02 19:26:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\JawboneUpdater
[2011/07/28 21:47:21 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Lazy 8 Studios
[2010/06/03 19:57:48 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Leadertech
[2011/07/03 16:19:36 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Lionhead Studios
[2013/05/31 19:20:09 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Little Inferno
[2013/06/15 20:19:20 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\LolClient
[2009/01/28 12:05:46 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Macromedia
[2013/06/22 13:44:37 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Malwarebytes
[2006/11/02 07:35:50 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Media Center Programs
[2012/08/18 08:57:15 | 000,000,000 | --SD | M] -- C:\Users\Attila\AppData\Roaming\Microsoft
[2011/08/14 23:34:01 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\MoreTerra
[2009/11/03 20:05:10 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Move Networks
[2010/05/01 01:19:12 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Mozilla
[2009/10/11 16:52:31 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\NCH Software
[2011/12/13 19:08:28 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Nicalis
[2013/08/10 09:19:44 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ooVoo Details
[2009/10/13 09:01:41 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\OpenOffice.org
[2013/10/04 20:57:39 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Origin
[2011/12/22 19:27:29 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Polynomial
[2009/02/23 23:27:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\QQ Games Plugin
[2013/06/15 16:06:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Riot Games
[2012/02/20 23:23:11 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\RotMG.Production
[2010/03/02 22:45:55 | 000,000,000 | RH-D | M] -- C:\Users\Attila\AppData\Roaming\SecuROM
[2012/07/21 18:40:12 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\six-updater
[2012/07/21 18:39:35 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\six-zsync
[2013/09/06 19:49:33 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Skype
[2011/03/10 16:04:38 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\skypePM
[2010/12/23 21:58:57 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Spore
[2012/08/04 16:30:59 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Subversion
[2013/07/13 21:05:18 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\System
[2012/01/31 08:02:14 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\SystemRequirementsLab
[2009/05/02 22:39:47 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\teamspeak2
[2013/09/03 16:21:51 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\The Creative Assembly
[2012/08/04 16:32:23 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\TortoiseSVN
[2010/07/02 12:11:03 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Tropico 3
[2013/11/06 20:00:19 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\TS3Client
[2013/09/05 20:48:25 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ts3overlay
[2010/05/01 00:49:00 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Turbine
[2013/07/14 20:40:26 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Ubisoft
[2013/11/07 21:53:47 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Uniblue
[2009/06/25 14:13:20 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Ventrilo
[2011/10/31 20:09:30 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Voxatron
[2010/09/12 18:13:08 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Wireshark
[2013/07/13 21:24:12 | 000,000,000 | -HSD | M] -- C:\Users\Attila\AppData\Roaming\wyUpdate AU
[2009/02/04 22:41:15 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\Yahoo!
[2012/02/20 23:20:37 | 000,000,000 | ---D | M] -- C:\Users\Attila\AppData\Roaming\ZumoCast

< MD5 for: ATAPI.SYS >
[2009/01/21 17:49:33 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_4c9c5a00\atapi.sys
[2009/01/21 17:49:33 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=0D83C87A801A3DFCD1BF73893FE7518C -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18034_none_dd1bb97e219e87cb\atapi.sys
[2009/04/11 01:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\erdnt\cache\atapi.sys
[2009/04/11 01:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\drivers\atapi.sys
[2009/04/11 01:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_b12d8e84\atapi.sys
[2009/04/11 01:32:26 | 000,019,944 | ---- | M] (Microsoft Corporation) MD5=1F05B78AB91C9075565A9D8A4B880BC4 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6002.18005_none_df23a1261eab99e8\atapi.sys
[2008/01/20 21:21:09 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_cc18792d\atapi.sys
[2008/01/20 21:21:09 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=2D9C903DC76A66813D350A562DE40ED9 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.18000_none_dd38281a2189ce9c\atapi.sys
[2006/11/02 04:49:36 | 000,019,048 | ---- | M] (Microsoft Corporation) MD5=4F4FCB8B6EA06784FB6D475B7EC7300F -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_c6c2e699\atapi.sys
[2009/01/21 17:49:33 | 000,021,560 | ---- | M] (Microsoft Corporation) MD5=96DC4E1A9F90CCD489950A8935425C59 -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.0.6001.22134_none_dda556493abc2795\atapi.sys

< MD5 for: CSRSS.EXE >
[2008/01/20 21:23:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\Windows\System32\csrss.exe
[2008/01/20 21:23:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=ABCA209EBA02CB59233614DB83B4F50D -- C:\Windows\winsxs\x86_microsoft-windows-csrss_31bf3856ad364e35_6.0.6001.18000_none_58e3e3d7e415ae4c\csrss.exe

< MD5 for: EXPLORER.EXE >
[2008/10/29 01:20:29 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=37440D09DEAE0B672A04DCCF7ABF06BE -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.16771_none_4f83bb287ccdb7e3\explorer.exe
[2008/10/29 01:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=4F554999D7D5F05DAAEBBA7B5BA1089D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18164_none_5177ca9879e978e8\explorer.exe
[2008/10/29 22:59:17 | 002,927,616 | ---- | M] (Microsoft Corporation) MD5=50BA5850147410CDE89C523AD3BC606E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.22298_none_51e4f8c7931bd1e1\explorer.exe
[2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\erdnt\cache\explorer.exe
[2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\explorer.exe
[2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) MD5=D07D4C3038F3578FFCE1C0237F2A1253 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6002.18005_none_53a0201e76de3a0b\explorer.exe
[2008/10/27 21:15:02 | 002,923,520 | ---- | M] (Microsoft Corporation) MD5=E7156B0B74762D9DE0E66BDCDE06E5FB -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6000.20947_none_5033cb5995cd990b\explorer.exe
[2008/01/20 21:22:34 | 002,927,104 | ---- | M] (Microsoft Corporation) MD5=FFA764631CB70A30065C12EF8E174F9F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.0.6001.18000_none_51b4a71279bc6ebf\explorer.exe

< MD5 for: MSWSOCK.DLL >
[2009/04/11 01:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\Windows\erdnt\cache\mswsock.dll
[2009/04/11 01:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\Windows\System32\mswsock.dll
[2009/04/11 01:28:22 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=8617350C9B590B63E620881092751BCB -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6002.18005_none_ba3ed0122a6d89da\mswsock.dll
[2008/01/20 21:22:10 | 000,223,232 | ---- | M] (Microsoft Corporation) MD5=89FD0595EEA4E505CABEFCF7008F2612 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.0.6001.18000_none_b85357062d4bbe8e\mswsock.dll

< MD5 for: NAPINSP.DLL >
[2008/01/20 21:22:39 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\Windows\System32\NapiNSP.dll
[2008/01/20 21:22:39 | 000,050,176 | ---- | M] (Microsoft Corporation) MD5=FC62A635063B762E1C3C60EA77279378 -- C:\Windows\winsxs\x86_microsoft-windows-n..ider-infrastructure_31bf3856ad364e35_6.0.6001.18000_none_ac1d40c88f30e6c0\NapiNSP.dll

< MD5 for: NLAAPI.DLL >
[2008/01/20 21:21:54 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\Windows\System32\nlaapi.dll
[2008/01/20 21:21:54 | 000,048,128 | ---- | M] (Microsoft Corporation) MD5=D1A84F7D4CAFCFE2A32149FF418056E5 -- C:\Windows\winsxs\x86_microsoft-windows-nlasvc_31bf3856ad364e35_6.0.6001.18000_none_6785f5c70aea4565\nlaapi.dll

< MD5 for: PNRPNSP.DLL >
[2008/01/20 21:23:36 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\Windows\System32\pnrpnsp.dll
[2008/01/20 21:23:36 | 000,062,464 | ---- | M] (Microsoft Corporation) MD5=690D41DF1D555F96D4898A0F54EBA065 -- C:\Windows\winsxs\x86_microsoft-windows-peertopeerpnrp_31bf3856ad364e35_6.0.6001.18000_none_717f15b322749509\pnrpnsp.dll

< MD5 for: SERVICES.EXE >
[2008/01/20 21:22:56 | 000,279,040 | ---- | M] (Microsoft Corporation) MD5=2B336AB6286D6C81FA02CBAB914E3C6C -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6001.18000_none_cf5fc067cd49010a\services.exe
[2009/04/11 01:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\Windows\erdnt\cache\services.exe
[2009/04/11 01:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\Windows\System32\services.exe
[2009/04/11 01:27:59 | 000,279,552 | ---- | M] (Microsoft Corporation) MD5=D4E6D91C1349B7BFB3599A6ADA56851B -- C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.0.6002.18005_none_d14b3973ca6acc56\services.exe

< MD5 for: SVCHOST.EXE >
[2008/01/20 21:21:53 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\erdnt\cache\svchost.exe
[2008/01/20 21:21:53 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\System32\svchost.exe
[2008/01/20 21:21:53 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=3794B461C45882E06856F282EEF025AF -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.0.6001.18000_none_b5bb59a1054dbde5\svchost.exe
[2013/04/04 13:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\svchost.exe

< MD5 for: USER32.DLL >
[2009/04/11 01:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\erdnt\cache\user32.dll
[2009/04/11 01:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\System32\user32.dll
[2009/04/11 01:28:25 | 000,627,712 | ---- | M] (Microsoft Corporation) MD5=75510147B94598407666F4802797C75A -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6002.18005_none_cf23e54d6a7e4a7e\user32.dll
[2008/01/20 21:22:31 | 000,627,200 | ---- | M] (Microsoft Corporation) MD5=B974D9F06DC7D1908E825DC201681269 -- C:\Windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.0.6001.18000_none_cd386c416d5c7f32\user32.dll

< MD5 for: USERINIT.EXE >
[2008/01/20 21:22:58 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\erdnt\cache\userinit.exe
[2008/01/20 21:22:58 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\System32\userinit.exe
[2008/01/20 21:22:58 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=0E135526E9785D085BCD9AEDE6FBCBF9 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.0.6001.18000_none_dc28ba15d1aff80b\userinit.exe

< MD5 for: WINLOGON.EXE >
[2009/04/11 01:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\erdnt\cache\winlogon.exe
[2009/04/11 01:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\System32\winlogon.exe
[2009/04/11 01:28:13 | 000,314,368 | ---- | M] (Microsoft Corporation) MD5=898E7C06A350D4A1A64A9EA264D55452 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6002.18005_none_71ae7a22d2134741\winlogon.exe
[2013/04/04 13:50:32 | 000,218,184 | ---- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
[2008/01/20 21:22:59 | 000,314,880 | ---- | M] (Microsoft Corporation) MD5=C2610B6BDBEFC053BBDAB4F1B965CB24 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.0.6001.18000_none_6fc30116d4f17bf5\winlogon.exe

< MD5 for: WINRNR.DLL >
[2009/04/11 01:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\Windows\System32\winrnr.dll
[2009/04/11 01:28:25 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=C411C80F90D6732380352B98B37BBD53 -- C:\Windows\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6002.18005_none_5b39cbfb4d3802b6\winrnr.dll
[2006/11/02 04:46:14 | 000,019,968 | ---- | M] (Microsoft Corporation) MD5=FF78B8E67EDCE9FEED651D7858D77A04 -- C:\Windows\winsxs\x86_microsoft-windows-dns-client-winrnr_31bf3856ad364e35_6.0.6000.16386_none_571790f3532b2696\winrnr.dll

< MD5 for: WSHELPER.DLL >
[2006/11/02 04:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\Windows\System32\wshelper.dll
[2006/11/02 04:46:14 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=20614C9F12A3A09A5015C9EBBD4419D2 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.0.6000.16386_none_024e4071fa6fea95\wshelper.dll

< dir C:\ /S /A:L /C >
Volume in drive C is OS
Volume Serial Number is 5EC0-3C0F
Directory of C:\
01/28/2009 10:57 AM <JUNCTION> Documents and Settings [C:\Users]
0 File(s) 0 bytes
Directory of C:\Documents and Settings
01/28/2009 10:57 AM <SYMLINKD> All Users [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Administrator
10/07/2013 11:48 AM <JUNCTION> Application Data [C:\Users\Administrator\AppData\Roaming]
10/07/2013 11:48 AM <JUNCTION> Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
10/07/2013 11:48 AM <JUNCTION> Local Settings [C:\Users\Administrator\AppData\Local]
10/07/2013 11:48 AM <JUNCTION> My Documents [C:\Users\Administrator\Documents]
10/07/2013 11:48 AM <JUNCTION> NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
10/07/2013 11:48 AM <JUNCTION> PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
10/07/2013 11:48 AM <JUNCTION> Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
10/07/2013 11:48 AM <JUNCTION> SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
10/07/2013 11:48 AM <JUNCTION> Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
10/07/2013 11:48 AM <JUNCTION> Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Administrator\AppData\Local
10/07/2013 11:48 AM <JUNCTION> Application Data [C:\Users\Administrator\AppData\Local]
10/07/2013 11:48 AM <JUNCTION> History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
10/07/2013 11:48 AM <JUNCTION> Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Administrator\Documents
10/07/2013 11:48 AM <JUNCTION> My Music [C:\Users\Administrator\Music]
10/07/2013 11:48 AM <JUNCTION> My Pictures [C:\Users\Administrator\Pictures]
10/07/2013 11:48 AM <JUNCTION> My Videos [C:\Users\Administrator\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [.]
01/28/2009 10:57 AM <JUNCTION> Desktop [.]
01/28/2009 10:57 AM <JUNCTION> Documents [.]
01/28/2009 10:57 AM <JUNCTION> Favorites [.]
01/28/2009 10:57 AM <JUNCTION> Start Menu [.]
01/28/2009 10:57 AM <JUNCTION> Templates [.]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Attila
01/28/2009 11:00 AM <JUNCTION> Application Data [C:\Users\Attila\AppData\Roaming]
01/28/2009 11:00 AM <JUNCTION> Cookies [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Cookies]
01/28/2009 11:00 AM <JUNCTION> Local Settings [C:\Users\Attila\AppData\Local]
01/28/2009 11:00 AM <JUNCTION> My Documents [C:\Users\Attila\Documents]
01/28/2009 11:00 AM <JUNCTION> NetHood [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
01/28/2009 11:00 AM <JUNCTION> PrintHood [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
01/28/2009 11:00 AM <JUNCTION> Recent [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Recent]
01/28/2009 11:00 AM <JUNCTION> SendTo [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\SendTo]
01/28/2009 11:00 AM <JUNCTION> Start Menu [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu]
01/28/2009 11:00 AM <JUNCTION> Templates [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Attila\AppData\Local
01/28/2009 11:00 AM <JUNCTION> Application Data [C:\Users\Attila\AppData\Local]
01/28/2009 11:00 AM <JUNCTION> History [C:\Users\Attila\AppData\Local\Microsoft\Windows\History]
01/28/2009 11:00 AM <JUNCTION> Temporary Internet Files [C:\Users\Attila\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Attila\Documents
01/28/2009 11:00 AM <JUNCTION> My Music [C:\Users\Attila\Music]
01/28/2009 11:00 AM <JUNCTION> My Pictures [C:\Users\Attila\Pictures]
01/28/2009 11:00 AM <JUNCTION> My Videos [C:\Users\Attila\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Roaming]
01/28/2009 10:57 AM <JUNCTION> Local Settings [C:\Users\Default\AppData\Local]
01/28/2009 10:57 AM <JUNCTION> My Documents [C:\Users\Default\Documents]
01/28/2009 10:57 AM <JUNCTION> NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
01/28/2009 10:57 AM <JUNCTION> PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
01/28/2009 10:57 AM <JUNCTION> Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
01/28/2009 10:57 AM <JUNCTION> SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\AppData\Local
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Local]
01/28/2009 10:57 AM <JUNCTION> History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
01/28/2009 10:57 AM <JUNCTION> Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Default\Documents
01/28/2009 10:57 AM <JUNCTION> My Music [C:\Users\Default\Music]
01/28/2009 10:57 AM <JUNCTION> My Pictures [C:\Users\Default\Pictures]
01/28/2009 10:57 AM <JUNCTION> My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Mcx1
02/08/2009 04:09 PM <JUNCTION> Application Data [C:\Users\Mcx1\AppData\Roaming]
02/08/2009 04:09 PM <JUNCTION> Cookies [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Cookies]
02/08/2009 04:09 PM <JUNCTION> Local Settings [C:\Users\Mcx1\AppData\Local]
02/08/2009 04:09 PM <JUNCTION> My Documents [C:\Users\Mcx1\Documents]
02/08/2009 04:09 PM <JUNCTION> NetHood [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
02/08/2009 04:09 PM <JUNCTION> PrintHood [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
02/08/2009 04:09 PM <JUNCTION> Recent [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Recent]
02/08/2009 04:09 PM <JUNCTION> SendTo [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\SendTo]
02/08/2009 04:09 PM <JUNCTION> Start Menu [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Start Menu]
02/08/2009 04:09 PM <JUNCTION> Templates [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Mcx1\AppData\Local
02/08/2009 04:09 PM <JUNCTION> Application Data [C:\Users\Mcx1\AppData\Local]
02/08/2009 04:09 PM <JUNCTION> History [C:\Users\Mcx1\AppData\Local\Microsoft\Windows\History]
02/08/2009 04:09 PM <JUNCTION> Temporary Internet Files [C:\Users\Mcx1\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Mcx1\Documents
02/08/2009 04:09 PM <JUNCTION> My Music [C:\Users\Mcx1\Music]
02/08/2009 04:09 PM <JUNCTION> My Pictures [C:\Users\Mcx1\Pictures]
02/08/2009 04:09 PM <JUNCTION> My Videos [C:\Users\Mcx1\Videos]
0 File(s) 0 bytes
Directory of C:\Documents and Settings\Public\Documents
01/28/2009 10:57 AM <JUNCTION> My Music [C:\Users\Public\Music]
01/28/2009 10:57 AM <JUNCTION> My Pictures [C:\Users\Public\Pictures]
01/28/2009 10:57 AM <JUNCTION> My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\ProgramData
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [.]
01/28/2009 10:57 AM <JUNCTION> Desktop [.]
01/28/2009 10:57 AM <JUNCTION> Documents [.]
01/28/2009 10:57 AM <JUNCTION> Favorites [.]
01/28/2009 10:57 AM <JUNCTION> Start Menu [.]
01/28/2009 10:57 AM <JUNCTION> Templates [.]
0 File(s) 0 bytes
Directory of C:\Qoobox\Quarantine\C\Windows\$NtUninstallKB46196$
02/20/2012 10:30 PM <SYMLINK> 834053426.vir [c:\windows\system32\config]
1 File(s) 0 bytes
Directory of C:\Users
01/28/2009 10:57 AM <SYMLINKD> All Users [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Default User [C:\Users\Default]
0 File(s) 0 bytes
Directory of C:\Users\Administrator
10/07/2013 11:48 AM <JUNCTION> Application Data [C:\Users\Administrator\AppData\Roaming]
10/07/2013 11:48 AM <JUNCTION> Cookies [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Cookies]
10/07/2013 11:48 AM <JUNCTION> Local Settings [C:\Users\Administrator\AppData\Local]
10/07/2013 11:48 AM <JUNCTION> My Documents [C:\Users\Administrator\Documents]
10/07/2013 11:48 AM <JUNCTION> NetHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
10/07/2013 11:48 AM <JUNCTION> PrintHood [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
10/07/2013 11:48 AM <JUNCTION> Recent [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent]
10/07/2013 11:48 AM <JUNCTION> SendTo [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\SendTo]
10/07/2013 11:48 AM <JUNCTION> Start Menu [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu]
10/07/2013 11:48 AM <JUNCTION> Templates [C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Administrator\AppData\Local
10/07/2013 11:48 AM <JUNCTION> Application Data [C:\Users\Administrator\AppData\Local]
10/07/2013 11:48 AM <JUNCTION> History [C:\Users\Administrator\AppData\Local\Microsoft\Windows\History]
10/07/2013 11:48 AM <JUNCTION> Temporary Internet Files [C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Administrator\Documents
10/07/2013 11:48 AM <JUNCTION> My Music [C:\Users\Administrator\Music]
10/07/2013 11:48 AM <JUNCTION> My Pictures [C:\Users\Administrator\Pictures]
10/07/2013 11:48 AM <JUNCTION> My Videos [C:\Users\Administrator\Videos]
0 File(s) 0 bytes
Directory of C:\Users\All Users
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\ProgramData]
01/28/2009 10:57 AM <JUNCTION> Desktop [C:\Users\Public\Desktop]
01/28/2009 10:57 AM <JUNCTION> Documents [C:\Users\Public\Documents]
01/28/2009 10:57 AM <JUNCTION> Favorites [C:\Users\Public\Favorites]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\ProgramData\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/28/2009 10:57 AM <JUNCTION> Application Data [.]
01/28/2009 10:57 AM <JUNCTION> Desktop [.]
01/28/2009 10:57 AM <JUNCTION> Documents [.]
01/28/2009 10:57 AM <JUNCTION> Favorites [.]
01/28/2009 10:57 AM <JUNCTION> Start Menu [.]
01/28/2009 10:57 AM <JUNCTION> Templates [.]
0 File(s) 0 bytes
Directory of C:\Users\Attila
01/28/2009 11:00 AM <JUNCTION> Application Data [C:\Users\Attila\AppData\Roaming]
01/28/2009 11:00 AM <JUNCTION> Cookies [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Cookies]
01/28/2009 11:00 AM <JUNCTION> Local Settings [C:\Users\Attila\AppData\Local]
01/28/2009 11:00 AM <JUNCTION> My Documents [C:\Users\Attila\Documents]
01/28/2009 11:00 AM <JUNCTION> NetHood [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
01/28/2009 11:00 AM <JUNCTION> PrintHood [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
01/28/2009 11:00 AM <JUNCTION> Recent [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Recent]
01/28/2009 11:00 AM <JUNCTION> SendTo [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\SendTo]
01/28/2009 11:00 AM <JUNCTION> Start Menu [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Start Menu]
01/28/2009 11:00 AM <JUNCTION> Templates [C:\Users\Attila\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Attila\AppData\Local
01/28/2009 11:00 AM <JUNCTION> Application Data [C:\Users\Attila\AppData\Local]
01/28/2009 11:00 AM <JUNCTION> History [C:\Users\Attila\AppData\Local\Microsoft\Windows\History]
01/28/2009 11:00 AM <JUNCTION> Temporary Internet Files [C:\Users\Attila\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Attila\Documents
01/28/2009 11:00 AM <JUNCTION> My Music [C:\Users\Attila\Music]
01/28/2009 11:00 AM <JUNCTION> My Pictures [C:\Users\Attila\Pictures]
01/28/2009 11:00 AM <JUNCTION> My Videos [C:\Users\Attila\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Default
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Roaming]
01/28/2009 10:57 AM <JUNCTION> Local Settings [C:\Users\Default\AppData\Local]
01/28/2009 10:57 AM <JUNCTION> My Documents [C:\Users\Default\Documents]
01/28/2009 10:57 AM <JUNCTION> NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
01/28/2009 10:57 AM <JUNCTION> PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
01/28/2009 10:57 AM <JUNCTION> Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]
01/28/2009 10:57 AM <JUNCTION> SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]
01/28/2009 10:57 AM <JUNCTION> Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]
01/28/2009 10:57 AM <JUNCTION> Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Default\AppData\Local
01/28/2009 10:57 AM <JUNCTION> Application Data [C:\Users\Default\AppData\Local]
01/28/2009 10:57 AM <JUNCTION> History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]
01/28/2009 10:57 AM <JUNCTION> Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Default\Documents
01/28/2009 10:57 AM <JUNCTION> My Music [C:\Users\Default\Music]
01/28/2009 10:57 AM <JUNCTION> My Pictures [C:\Users\Default\Pictures]
01/28/2009 10:57 AM <JUNCTION> My Videos [C:\Users\Default\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Mcx1
02/08/2009 04:09 PM <JUNCTION> Application Data [C:\Users\Mcx1\AppData\Roaming]
02/08/2009 04:09 PM <JUNCTION> Cookies [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Cookies]
02/08/2009 04:09 PM <JUNCTION> Local Settings [C:\Users\Mcx1\AppData\Local]
02/08/2009 04:09 PM <JUNCTION> My Documents [C:\Users\Mcx1\Documents]
02/08/2009 04:09 PM <JUNCTION> NetHood [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Network Shortcuts]
02/08/2009 04:09 PM <JUNCTION> PrintHood [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]
02/08/2009 04:09 PM <JUNCTION> Recent [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Recent]
02/08/2009 04:09 PM <JUNCTION> SendTo [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\SendTo]
02/08/2009 04:09 PM <JUNCTION> Start Menu [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Start Menu]
02/08/2009 04:09 PM <JUNCTION> Templates [C:\Users\Mcx1\AppData\Roaming\Microsoft\Windows\Templates]
0 File(s) 0 bytes
Directory of C:\Users\Mcx1\AppData\Local
02/08/2009 04:09 PM <JUNCTION> Application Data [C:\Users\Mcx1\AppData\Local]
02/08/2009 04:09 PM <JUNCTION> History [C:\Users\Mcx1\AppData\Local\Microsoft\Windows\History]
02/08/2009 04:09 PM <JUNCTION> Temporary Internet Files [C:\Users\Mcx1\AppData\Local\Microsoft\Windows\Temporary Internet Files]
0 File(s) 0 bytes
Directory of C:\Users\Mcx1\Documents
02/08/2009 04:09 PM <JUNCTION> My Music [C:\Users\Mcx1\Music]
02/08/2009 04:09 PM <JUNCTION> My Pictures [C:\Users\Mcx1\Pictures]
02/08/2009 04:09 PM <JUNCTION> My Videos [C:\Users\Mcx1\Videos]
0 File(s) 0 bytes
Directory of C:\Users\Public\Documents
01/28/2009 10:57 AM <JUNCTION> My Music [C:\Users\Public\Music]
01/28/2009 10:57 AM <JUNCTION> My Pictures [C:\Users\Public\Pictures]
01/28/2009 10:57 AM <JUNCTION> My Videos [C:\Users\Public\Videos]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile
01/21/2009 04:28 PM <JUNCTION> Application Data [..]
01/21/2009 04:28 PM <JUNCTION> Cookies [..]
01/21/2009 04:28 PM <JUNCTION> Local Settings [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [..]
0 File(s) 0 bytes
Directory of C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data
01/21/2009 04:28 PM <JUNCTION> Application Data [C:\Windows\system32\config\systemprofile\AppData\Local]
01/21/2009 04:28 PM <JUNCTION> History [..]
01/21/2009 04:28 PM <JUNCTION> Temporary Internet Files [.]
0 File(s) 0 bytes
Total Files Listed:
1 File(s) 0 bytes
440 Dir(s) 52,163,964,928 bytes free

< C:\Windows\assembly\tmp\U\*.* /s >

< %systemroot%\*. /mp /s >

< hklm\software\clients\startmenuinternet|command /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2013/05/16 18:34:33 | 000,757,400 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2013/05/16 18:34:33 | 000,757,400 | ---- | M] (Microsoft Corporation)

< hklm\software\clients\startmenuinternet|command /64 /rs >
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\HideIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /HideShortcuts [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ShowIconsCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /ShowShortcuts [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\InstallInfo\\ReinstallCommand: "C:\Program Files\Mozilla Firefox\uninstall\helper.exe" /SetAsDefaultAppGlobal [2013/11/06 06:04:48 | 000,872,352 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\open\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\properties\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -preferences [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\FIREFOX.EXE\shell\safemode\command\\: "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode [2013/11/06 06:05:08 | 000,275,568 | ---- | M] (Mozilla Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\HideIconsCommand: "C:\Windows\system32\ie4uinit.exe" -hide [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ShowIconsCommand: "C:\Windows\system32\ie4uinit.exe" -show [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\InstallInfo\\ReinstallCommand: "C:\Windows\system32\ie4uinit.exe" -reinstall [2012/03/02 03:01:53 | 000,074,240 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\naom\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" -extoff [2013/05/16 18:34:33 | 000,757,400 | ---- | M] (Microsoft Corporation)
HKEY_LOCAL_MACHINE\software\clients\startmenuinternet\IEXPLORE.EXE\shell\open\command\\: "C:\Program Files\Internet Explorer\iexplore.exe" [2013/05/16 18:34:33 | 000,757,400 | ---- | M] (Microsoft Corporation)

< %systemroot%\system32\*.dll /lockedfiles >

< %systemroot%\Tasks\*.job /lockedfiles >

< %ProgramFiles%\WINDOWS NT\*.* /s >
[2010/06/28 09:54:38 | 000,339,968 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WINDOWS NT\Accessories\wordpad.exe
[2006/11/02 07:40:01 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WINDOWS NT\Accessories\en-US\wordpad.exe.mui
[2009/04/11 01:28:24 | 000,324,608 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WINDOWS NT\TableTextService\TableTextService.dll
[2006/09/19 06:43:31 | 000,016,212 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceAmharic.txt
[2009/02/18 13:39:57 | 001,272,752 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceArray.txt
[2009/02/18 13:39:57 | 000,980,032 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceDaYi.txt
[2009/02/18 13:39:58 | 001,665,878 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceSimplifiedQuanPin.txt
[2009/02/18 13:39:58 | 001,445,430 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceSimplifiedShuangPin.txt
[2009/02/18 13:40:01 | 001,810,352 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceSimplifiedZhengMa.txt
[2006/09/19 06:43:34 | 000,044,968 | ---- | M] () -- C:\Program Files\WINDOWS NT\TableTextService\TableTextServiceYi.txt
[2009/04/11 01:23:33 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Program Files\WINDOWS NT\TableTextService\en-US\TableTextService.dll.mui

< %systemroot%\system32\drivers\*.sys /lockedfiles >

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Application Data\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\History] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\AppData\Local\Temporary Internet Files] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\Application Data] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\Cookies] -> Error: Cannot create file handle -> Unknown point type
[C:\Windows\System32\config\systemprofile\Local Settings] -> Error: Cannot create file handle -> Unknown point type

< End of report >
  • 0

#13
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
OTL Extras Log:
OTL Extras logfile created on: 11/7/2013 10:21:16 PM - Run 6
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Attila\Desktop
Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.25 Gb Total Physical Memory | 1.89 Gb Available Physical Memory | 58.25% Memory free
6.73 Gb Paging File | 5.03 Gb Available in Paging File | 74.80% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 288.03 Gb Total Space | 48.85 Gb Free Space | 16.96% Space Free | Partition Type: NTFS
Drive D: | 10.00 Gb Total Space | 3.90 Gb Free Space | 38.98% Space Free | Partition Type: NTFS
Drive F: | 1397.26 Gb Total Space | 654.61 Gb Free Space | 46.85% Space Free | Partition Type: NTFS

Computer Name: ATTILA-PC | User Name: Attila | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (All) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- "%1" %*
.chm [@ = chm.file] -- C:\Windows\hh.exe (Microsoft Corporation)
.cmd [@ = cmdfile] -- "%1" %*
.com [@ = ComFile] -- "%1" %*
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.exe [@ = exefile] -- "%1" %*
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.hta [@ = htafile] -- C:\Windows\System32\mshta.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.inf [@ = inffile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.ini [@ = inifile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\rundll32.exe (Microsoft Corporation)
.js [@ = JSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.jse [@ = JSEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.pif [@ = piffile] -- "%1" %*
.reg [@ = regfile] -- C:\Windows\regedit.exe (Microsoft Corporation)
.scr [@ = scrfile] -- "%1" /S
.txt [@ = txtfile] -- C:\Windows\System32\NOTEPAD.EXE (Microsoft Corporation)
.vbe [@ = VBEFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.vbs [@ = VBSFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsf [@ = WSFFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)
.wsh [@ = WSHFile] -- C:\Windows\System32\WScript.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
batfile [open] -- "%1" %*
batfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
chm.file [open] -- "%SystemRoot%\hh.exe" %1 (Microsoft Corporation)
cmdfile [edit] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
cmdfile [open] -- "%1" %*
cmdfile [print] -- %SystemRoot%\System32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htafile [open] -- C:\Windows\system32\mshta.exe "%1" %* (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [print] -- rundll32.exe %SystemRoot%\system32\mshtml.dll,PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
inffile [open] -- %SystemRoot%\System32\NOTEPAD.EXE %1 (Microsoft Corporation)
inffile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
inifile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
inifile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
jsfile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsfile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
jsefile [edit] -- C:\Windows\System32\Notepad.exe %1 (Microsoft Corporation)
jsefile [open] -- C:\Windows\System32\WScript.exe "%1" %* (Microsoft Corporation)
jsefile [print] -- C:\Windows\System32\Notepad.exe /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [edit] -- %SystemRoot%\system32\notepad.exe "%1" (Microsoft Corporation)
regfile [open] -- regedit.exe "%1" (Microsoft Corporation)
regfile [merge] -- Reg Error: Key error.
regfile [print] -- %SystemRoot%\system32\notepad.exe /p "%1" (Microsoft Corporation)
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
txtfile [open] -- %SystemRoot%\system32\NOTEPAD.EXE %1 (Microsoft Corporation)
txtfile [print] -- %SystemRoot%\system32\NOTEPAD.EXE /p %1 (Microsoft Corporation)
txtfile [printto] -- %SystemRoot%\system32\notepad.exe /pt "%1" "%2" "%3" "%4" (Microsoft Corporation)
vbefile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbefile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbefile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
vbsfile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
vbsfile [open] -- %SystemRoot%\System32\WScript.exe "%1" %* (Microsoft Corporation)
vbsfile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wsffile [edit] -- "%SystemRoot%\System32\Notepad.exe" %1 (Microsoft Corporation)
wsffile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
wsffile [print] -- "%SystemRoot%\System32\Notepad.exe" /p %1 (Microsoft Corporation)
wshfile [open] -- "%SystemRoot%\System32\WScript.exe" "%1" %* (Microsoft Corporation)
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"FirewallDisableNotify" = 0
"AntiVirusDisableNotify" = 0
"UpdatesDisableNotify" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{042E6332-6AE2-44B3-823A-11FB45DE02E3}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{04F10AFD-E2A0-4978-B404-4D6F74F55FE3}" = rport=80 | protocol=6 | dir=out | app=g:\steam\steamapps\common\warframe\tools\launcher.exe |
"{11ED275B-CE45-4D57-A767-D8DF486B14A4}" = lport=56986 | protocol=6 | dir=in | name=pando media booster |
"{124378AA-F27E-4AA8-9B90-D9BBADBDF408}" = lport=56986 | protocol=6 | dir=in | name=pando media booster |
"{189FF92B-F4EC-4534-9B73-5772B505FB73}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{2004F0B3-686B-41AE-822F-AD54E5E9341B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{22D67D7E-BB4B-4DC0-AF3D-7E652BBAC980}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{29CD3F4B-DBF3-415B-8A57-CA0DC72ECAF6}" = lport=10244 | protocol=6 | dir=in | app=system |
"{2CC36273-32E0-4302-B8BF-5C77A0DE50DE}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2CD11CD8-9DB9-4E4A-B68E-4FF5C8985569}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{2EB92036-41F2-4C32-BCB2-520AA11250B0}" = lport=6881 | protocol=6 | dir=in | name=wow2 |
"{342296BF-D3A7-453F-89BE-E20C30376F65}" = lport=56986 | protocol=17 | dir=in | name=pando media booster |
"{3424A363-F3F8-4A8A-BB86-EC4A42030C1C}" = lport=445 | protocol=6 | dir=in | app=system |
"{3E9011C3-091D-4071-9E5A-64161DBEB898}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{420CA718-DCB6-42BE-94F6-5B5C023A9FA4}" = lport=56986 | protocol=17 | dir=in | name=pando media booster |
"{5A727F59-E454-42E1-ADD3-0CA90D729B76}" = lport=3390 | protocol=6 | dir=in | app=system |
"{5F872F8A-90B3-4B40-8023-A96038650D3B}" = rport=10244 | protocol=6 | dir=out | app=system |
"{60B8A53D-ADE3-4F4B-B966-5D3200010D47}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{615DDADF-DE0E-4091-AD1D-829821FAC6E3}" = rport=139 | protocol=6 | dir=out | app=system |
"{64C12A51-6328-429D-8E5B-D5B3D4C4066F}" = rport=80 | protocol=6 | dir=out | app=g:\steam\steamapps\common\warframe\warframe.x64.exe |
"{68224EF2-65B6-46CC-991A-7DA8400E9F53}" = lport=10244 | protocol=6 | dir=in | app=system |
"{6E850343-1C3F-4666-A466-7743F6E25908}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{7152BA22-9887-4023-8B7F-3E2E59A39727}" = lport=3390 | protocol=6 | dir=in | app=system |
"{7B49B517-1C71-4A00-A17A-25E186F21AFB}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{7E023E1D-DDEA-4DC2-B648-545DAE8340D1}" = rport=80 | protocol=6 | dir=out | app=g:\steam\steamapps\common\warframe\warframe.exe |
"{87831E03-8D52-4E79-B379-AF5B16327B04}" = rport=445 | protocol=6 | dir=out | app=system |
"{8AC60A96-D37C-449D-831C-D5185B7F102F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 |
"{94D405E0-E660-4154-B2C4-EDA3BB7463F1}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{954D2D92-F44F-4E21-8D01-CD6601B3356F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{971B373B-6542-4992-B074-06924CFDF0C5}" = rport=138 | protocol=17 | dir=out | app=system |
"{A3CF5639-FC44-458D-8D06-58967EAA5A06}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |
"{A499ECF6-D245-4841-A823-F0EFDCB2CB01}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |
"{A6BE238F-3F70-403B-A6B8-A0A692CEDFB5}" = rport=10244 | protocol=6 | dir=out | app=system |
"{AB431D3F-CC03-4729-85AB-DCCF99C3EA05}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{B1CDA453-12E7-4C02-8F4F-CCC4C09C844F}" = lport=6882 | protocol=6 | dir=in | name=wow3 |
"{B7338D81-683C-4649-9C68-5B378B14C9A9}" = lport=6112 | protocol=6 | dir=in | name=wow |
"{BAAFA8C4-36E4-44C6-904E-1F630473060B}" = lport=137 | protocol=17 | dir=in | app=system |
"{C490DA93-B9D2-44A6-8D6F-F722934F23BB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{C65C7B1D-44A1-4C4A-831E-8CB2A942F153}" = lport=138 | protocol=17 | dir=in | app=system |
"{CCB984D4-4FCB-4EC1-8340-5F89F93ED4B5}" = lport=6999 | protocol=6 | dir=in | name=wow4 |
"{DD558274-38EC-4101-9C0D-1B6D181C1A33}" = lport=139 | protocol=6 | dir=in | app=system |
"{E1B9B5F3-A244-48DE-B0D6-0408B8B4DAE6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E8E8A52D-C558-4D2E-9187-1E5425D8E767}" = rport=137 | protocol=17 | dir=out | app=system |
"{EB603E19-444F-4B8D-ADD5-1F1DB54F988C}" = lport=3724 | protocol=6 | dir=in | name=wow1 |
"{F59F5A17-A8CE-4252-A2FD-E8028B59F462}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00438999-9E4C-4A49-B282-AD98D677BC22}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bit.trip void\bit.trip void.exe |
"{00536591-EE4F-42A9-89F3-A5695F6792B3}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{00852305-06EA-4A15-B55B-CF831404A378}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{0086C8CB-F38B-4B52-97B1-1B1DC834AE87}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\tropico 3\tropico3.exe |
"{008F9322-D8DF-4F28-A2DF-26837305D9E9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\fear ultimate shooter edition\fear.exe |
"{00919051-68DE-4E3B-9661-1C1FEEC10166}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp_launcher.exe |
"{00938738-3AEE-4338-B20E-1F91C109140F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{00AC1A1F-EF3B-4E85-878E-0C7012B4AC3D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\uplink\uplink.exe |
"{00D32BD1-48D7-465D-9C44-0A0F31F91E39}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\cargo commander\cargocommander.exe |
"{015807EB-A947-4C9E-8D57-4BBF2AE41AB7}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{015FBAE4-34DE-43C9-84E8-46F2E3906592}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{0167453F-E4AA-4EAE-A292-1B3834B634DF}" = dir=out | app=c:\program files\zecter\zumocast\zumocast.exe |
"{01DFE7C1-472B-43F7-AA34-3E3504CFA711}" = protocol=6 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{02372A22-9C24-4301-AC28-E87A9AE1A612}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\rhythm zone\rhythmzone.exe |
"{024C509D-9E7E-4EE6-BCEB-2E67A181A9CA}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\thepolynomial\polynomial.exe |
"{028B65A9-8A2A-4965-BC17-3C5CADE8EA6A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\overlord ii\config.exe |
"{02B9AAF7-0E18-4E6F-BAB2-8E1E5A5C47C3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{02E99ED6-8A24-41DF-AE06-C22A7CE61E6C}" = protocol=17 | dir=in | app=c:\program files\origin games\battlefield 4 beta\bf4.exe |
"{0300679A-BC40-4B6B-868E-98E285302EDC}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\brazen\brazen.exe |
"{0322D394-85E7-4470-92A7-5B4BB6FE4480}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\metro 2033\metro2033.exe |
"{034874B2-853F-41CC-9BC8-75C067A598F1}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\black lake prototype\black.exe |
"{03F7E01A-4440-445B-9D2C-ACF44CCE5DE1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{04361FEE-0F06-4768-BC03-F72F16AF3BFF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam 3\bin\sam3.exe |
"{045833E2-BABC-4A68-A098-4523A8B1AD05}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\world of goo\worldofgoo.exe |
"{0470931E-6307-4E89-9B66-9F55AB9A7E5B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{04A49197-36B7-448E-A813-5F88B6A65812}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{04BB4FFA-0E10-48EE-864D-FBA4AC44EDDC}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe |
"{04DFA930-A237-45E0-AF8B-0DCD951DE31E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\arma 2\arma2.exe |
"{04E720D2-F6E7-4ADE-956C-C74152715475}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{0519E4D2-2DEE-40F5-AD45-848D48F64B26}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\saints row the third\game_launcher.exe |
"{0522B98B-ED23-46DB-AED3-9D827EE7D609}" = dir=out | app=c:\program files\zecter\zumocast\bin\gst-thumbnailer.exe |
"{054256B7-0291-41E0-A447-A3862EF94534}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\psychonauts\psychonauts.exe |
"{0561C13E-2A10-443A-B063-859A9A8F32E3}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\cave story+\cavestory+.exe |
"{058D1B99-B218-4429-8FBF-4F73C2F83D9B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\mp\mohmpgame.exe |
"{05A73107-D2E0-4C51-B1FA-246A482C503E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shattered_horizon\client_exe\shattered_horizon.exe |
"{05F00F33-C4B9-4018-B1B0-DAFBCCA02E0B}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\intrusion 2\intrusion2.exe |
"{0635AA86-C650-4EBD-8C2B-28D6895E8057}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{063CDE3E-AAEA-4BFF-B6B3-FBCF4CAD78CB}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dota 2 test\dota.exe |
"{064A2235-3B14-4BF7-8D30-25A18B7E5AA4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sleepingdogs\hkship.exe |
"{0668DD6D-2D1E-413A-BC3A-30D3B8700D0E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{0699B8E6-AD3A-40C2-82E1-41F4632A9C24}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\darksiders\darksiderspc.exe |
"{06C119C7-62AA-4826-AB62-F5809E55521A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\universe sandbox\universe sandbox.exe |
"{06D1EB41-D971-4DF8-9883-7153AAAC977F}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{06D2B06B-F94E-41D1-8644-503F33996DBA}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\super hexagon\superhexagon.exe |
"{071E9EFC-B9EF-4F89-9E34-FC8584021619}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{0739F362-7853-4840-91D9-B595A9AFDFB8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\intrusion 2\intrusion2.exe |
"{07667A16-532E-4858-9CDF-5AFF6B1099F4}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\crysis\bin32\crysis.exe |
"{078499EA-ECE5-49F7-A642-3EA355A3BF3F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\zenoclash\zenoclash.exe |
"{078B53CD-77C2-4531-9A93-7702EC06B55D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\spore\runme.exe |
"{07F28084-C3E4-44CE-A795-7ECB2DCE423C}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{081CAACE-F8C3-4702-90EF-D53950DC4FC1}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{0875A5F6-27BE-4442-B7C3-826D85005EBD}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sanctum\binaries\win32\shippingpc-sanctumgame.exe |
"{0928A75E-8A60-4BB1-B3DF-887F4687EE32}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\alan wake\alanwake.exe |
"{094F6D21-9C2F-4A27-A2A0-491855FA4D5C}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{0973EC32-8D02-4C8E-87CF-DD7654EE68AE}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{09908BB5-DBC1-4389-9650-CCD5AD7CC5BE}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{09AB2450-28BE-449F-AE00-809879DEA007}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\gratuitous space battles\gsb.exe |
"{0A02371B-27AE-432E-B6DC-7421512C2AF9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bittriprunner2\runner2.exe |
"{0A619844-D61C-4E59-A5D2-CDC40F77B12F}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{0B2C590C-0461-4FF1-9637-A66F6ED1DC28}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{0BD795EB-5A38-401C-87B5-328A5EA7E2B3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the walking dead\walkingdead101.exe |
"{0BDE87F1-047C-4163-86C1-F2C8119102E8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\world of goo\worldofgoo.exe |
"{0C278B76-A144-4CEB-93F1-66BF5026D186}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\alice madness returns\binaries\win32\alicemadnessreturns.exe |
"{0C43DF5D-AAE3-4EF3-B0C7-4F3A9ABDD3F7}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\hammerfight\hammerfight.exe |
"{0C4AB37F-3980-41F4-8D1F-8385F1107FF3}" = protocol=6 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{0C7DEF44-BE29-494D-B16E-D7B34C43A0A4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\burnoutparadise.exe |
"{0C7E271E-D7DF-4328-943A-FC7C8ADD8F7D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dead rising 2\deadrising2.exe |
"{0CAEE3EE-A601-4063-B22D-33D8C85E1474}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bit.trip runner\runner.exe |
"{0CBE5FB7-CE6C-4900-B29C-76861427DF66}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\thepolynomial\polynomial.exe |
"{0DB1AB8C-2444-42B4-A90E-99CCB6544F81}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{0DD291B5-4F7C-4902-83D1-4BF2B562A6D1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\oil rush\launcher_steam.bat |
"{0E09228F-185A-4C4B-96C7-A5E16F718259}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the binding of isaac\isaac.exe |
"{0E13AC12-8D19-413A-AE59-10A4B148CC93}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\back to the future 104\backtothefuture104.exe |
"{0E301063-952B-482B-B1C5-3CAD31A52A14}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dungeon hearts\dungeonhearts.exe |
"{0E40ABEF-A0BF-45A0-9AAB-49EC70447EA8}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\dota 2 beta\dota.exe |
"{0E7E42D7-758F-45BC-BAB3-811A0039C12A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{0EEEBAA4-01B7-447E-8ABA-ADFB665AC8FE}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{0EF4A6A9-E0EA-4657-8B2F-16A231DE467F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\grand theft auto\wino\grand theft auto.exe |
"{0F3A291D-3F76-467F-B156-2343C6531289}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{0F575F7B-31AB-4CE7-8B66-70697F435F42}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\beat hazard\beathazard.exe |
"{0F9E4479-15E1-4EB1-BCE0-2DACDC9D324A}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fear2\fear2.exe |
"{0FEEB190-E2A0-4476-B3EB-52219AD80B27}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto 3\gta3.exe |
"{10282E8B-0D11-42AA-B927-A41FB89A75A3}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fearxp2\fearxp2.exe |
"{10602FAC-6E91-49DC-9CB3-6C09A2FDED27}" = protocol=17 | dir=in | app=c:\program files\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{1096A92D-4293-46B2-B582-01E7F82B5BCA}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\steelstorm\steelstorm-dedicated.exe |
"{11232693-A245-466D-82ED-C6CE173565DF}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\from dust\from_dust.exe |
"{11254876-FFD1-4A6F-BC9A-C7FEA4CFEA6A}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\blocks that matter\btm_launcher_win.exe |
"{11543371-05D7-4726-BFF3-A092BB5147F6}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\alan wake\alanwake.exe |
"{1165A1E3-C7CA-4376-8DFD-DC2C0AE8898E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\deus ex - human revolution\dxhr.exe |
"{116D5CE2-E719-4A50-A5E3-73F77D10B3FB}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\beat hazard\beathazard.exe |
"{118055C0-A0F3-47EA-B751-D935E655B02B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\osmos\osmos.exe |
"{11FFC925-2DBF-4DC6-99E7-79C52893820C}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the binding of isaac\isaac.exe |
"{1237984E-7D95-41BB-B72A-5E17977DF7C8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{124D01D9-6801-4F00-96A7-BE629026F40E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dungeon hearts\dungeonhearts.exe |
"{126DD89B-6416-47AD-9194-DC3C8A442CA4}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-enus-downloader.exe |
"{128818A9-1E45-4A33-BA69-AF0248994C13}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\majesty 2\m2editor.exe |
"{1298BA02-62CA-4FE0-A1B0-9D481BED5BD2}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{12ACAEE2-C4F6-47A0-A37D-572FB3D6A0D8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\jamestown\jamestown.exe |
"{12D26E00-7C4A-4BEB-A7C4-5AAF7E89720A}" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\half-life\hl.exe |
"{12FC01E6-6966-49EE-9DB1-B366A44D252E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\team fortress 2\hl2.exe |
"{131BEE99-D9F6-4923-A6F6-7DBA0B3111FC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\left 4 dead\left4dead.exe |
"{137A0F53-A8A9-41D5-84DA-4B3394C063B4}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dota 2 test\dota.exe |
"{1406ACA1-1735-4A5C-909F-7A8E4D43E82D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\darwinia\darwinia.exe |
"{140E2F7D-505A-49AE-8FB3-9F5C35C5A7FB}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\stacking\stack.exe |
"{141E1E45-8E3F-491D-8251-B577DD836323}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto\wino\grand theft auto.exe |
"{14577782-F649-49E8-90C9-91C27296B1FA}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{14636E9F-9810-4362-8C70-681E0C9FD7E0}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\back to the future ep 2\backtothefuture102.exe |
"{1499F782-E85F-42D9-89BF-0CBA39815A53}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\overlord\config.exe |
"{149A2057-04A5-46D8-934A-C4C420B48325}" = protocol=6 | dir=in | app=d:2\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{14BC4052-78BD-4A13-BC40-CF94E87DC3E9}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\uplink\uplink.exe |
"{14C8C743-4732-4C36-9EEE-6E9C9A71690F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\osmos\osmos.exe |
"{152A8D4A-2130-41E2-A792-5961082B8493}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{156797B8-9C8D-4773-AADE-C5063B3B995B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{1589CF5A-AC14-4FD4-934E-96C26F71C960}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\alien swarm\swarm.exe |
"{15F4B760-740D-4104-9D2F-4C78CD5A2A94}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\amnesia the dark descent\launcher.exe |
"{15F6787A-E87C-488E-9D14-8FF507F54A9D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dead island\deadislandgame.exe |
"{1633FFEB-6D58-489E-9669-3FEBF59B56B7}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\back to the future ep 1\backtothefuture101.exe |
"{16398760-E4E8-42DF-8BE3-78991B3AF277}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\left 4 dead\left4dead.exe |
"{165C4B69-BEC1-4DA4-97A7-62810926FBEA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{165F3467-5A93-4DD7-AEA6-BD93C8F10A1E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\super hexagon\superhexagon.exe |
"{167685A8-5D4E-412A-AEE1-D483FD8F6A84}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\quantum conundrum\binaries\win32\trygame-win32-shipping.exe |
"{16B94693-4944-4D65-9561-1502E80163B4}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{16C54B4D-E41C-4F71-A083-733612ED023F}" = protocol=17 | dir=in | app=f:\steam\steamapps\just2damndgood\half-life\hl.exe |
"{16D3A837-7258-4C75-B8D8-C6597AF30D39}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\hoard\win32\reuben.exe |
"{175875E5-1AC0-4156-8808-F41881434D8E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dota 2 beta\dota.exe |
"{17661FFB-936F-4C80-8F2A-42396F5D041E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\overlord\overlord.exe |
"{17D4E89E-CCB8-4C12-BD56-BCD82CB5A4C1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\brutallegend\brutallegend.exe |
"{1859841E-1C41-426B-9BEF-8AAE3CD04CA4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{1883423F-D9E0-430C-9A2F-CAAB973D64A4}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\scribblenauts\scribble.exe |
"{18BACF49-DE86-476B-B08D-326A1C946CA4}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp_dx11.exe |
"{18CE32C0-E6B4-4460-B017-6E62A397655F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{18DBB301-63E0-45E2-9850-2C99339B2979}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe |
"{18FFD82A-EFB6-42E4-91DF-AAC082A43AF4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\orcs must die 2\build\release\orcsmustdie2.exe |
"{190214FC-B248-47B0-89A0-17C45F2FFF7C}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{19960826-651B-45D7-B9F2-E166DF16F09E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{19AED618-C477-441C-9F5E-1BC6E99D078D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{1A0C6375-42FC-45E1-9602-2C4C52DE6B81}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{1A37124F-C227-40F7-A700-661B0544E238}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{1A439B82-7AF2-405B-AFDC-3415D2EDAE1E}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{1A4428D9-B3C3-4C07-88AF-8AA5BE14E6EA}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto 2\gta2.exe |
"{1A472EA7-677A-4191-A37E-54A96051A854}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fear2\fear2.exe |
"{1A73AE4C-CFC9-4DC4-A908-FDB4373C5DB7}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{1A8018F8-46F1-4BC0-AD7D-770CDB06798D}" = protocol=17 | dir=in | app=f:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{1A816178-3C96-4E8E-845F-A25E3D456198}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{1A852F5B-37C0-4400-B0B6-35EFB4DA4216}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\orcs must die 2\build\release\orcsmustdie2.exe |
"{1AA73B66-A1DF-4D2D-934C-D41F3C553988}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\portal 2\portal2.exe |
"{1AE624DB-301D-4390-89EA-95CA6997A40F}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{1B311117-23C1-4C39-B9B6-3EF44E1ED957}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\binaries\moh.exe |
"{1B3503BB-1C9B-476E-8D06-AAC81C1B89E5}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd.exe |
"{1B567D04-6646-4029-9BAE-60ABBF34B876}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{1BFF2F5E-E6D9-4C46-8ED2-207B061B801E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\warframe\warframe.x64.exe |
"{1C173F57-9412-461F-8966-EF75FB79E009}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\oddworld abes oddysee\abewin.exe |
"{1C566CAF-F0F1-4325-9FC6-457B496BEB13}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{1C9008CF-1CF4-4FF8-BB04-690DA7133F4F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv beyond the sword\beyond the sword\civ4beyondsword.exe |
"{1D5AFCC0-A2FC-498C-A9FA-50CCE0CC4CFD}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
"{1D743977-13FD-4E58-9088-B7125492F30F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the stanley parable demo\stanley.exe |
"{1D943C46-C334-489D-A3BC-790B4A0A1DD0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{1DFD29D8-6004-4A3C-9E3A-576662D56193}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{1E046D9C-8B62-42DC-AB12-B85CA650BA76}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\poker night 2\pokernight2.exe |
"{1E307772-1FEC-477E-AC28-D06D3548E270}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\stacking\stack.exe |
"{1E34F665-2307-4648-9736-BB568762130B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{1E599023-9E0F-4B57-B0F5-FC44C2E96D5B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\grand theft auto 2\gta2.exe |
"{1EAC3C67-AFB2-4B5E-8C5C-0B5FD85FD797}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\beat hazard\runme.exe |
"{1EAED9EF-95E4-401F-8263-5C875AE91CEC}" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |
"{1EC3225A-C2F8-41EE-BF1E-6FA118DCE9A8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\tinyandbig\tinyandbig.exe |
"{1F270246-9781-4789-879C-8EEEC93776A7}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{1F2F12E5-4905-4664-BEB6-D10D30F656FF}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |
"{1F766CE3-1219-4FBE-8B8C-EBC81EB51B71}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp_dx11.exe |
"{20619F32-D2D0-40E9-A661-02E4F4B4A481}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{20682D3E-6021-480B-9C37-4A549D397478}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe |
"{20C1155B-71D8-4BFB-8936-03A077AE84B1}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\ben there, dan that!\winsetup.exe |
"{20C15B51-37A3-479F-8AE7-1AD762530A14}" = protocol=17 | dir=in | app=c:\program files\electronic arts\battleforge\battleforge.exe |
"{20CC3555-CD27-4977-8B7A-050209084AA1}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the binding of isaac\binding_of_isaac.exe |
"{20D0EEFA-4C64-4348-8853-9F242C2147CA}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\left 4 dead\left4dead.exe |
"{20F8EE59-8C25-4768-B932-5A9855456443}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\amnesia the dark descent\launcher.exe |
"{21143B85-F7B3-4C70-9CF1-2AB41294F708}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bully scholarship edition\bully.exe |
"{21788684-8F4C-4888-93DE-FFA76D6767BE}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\jamestown\jamestown.exe |
"{2194FE59-9724-49A4-831C-7C23A22C165D}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{21A99D63-1914-4918-BD40-BBFAEBB3BB3E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\atomzombiesmasher\data\atomzombiesmasher.exe |
"{21B19CEA-E43B-413E-B519-EF192C58F99E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\besetup\setup_battleyearma2oa.exe |
"{21D7AB3E-4018-424D-BB00-F9CB579E94FE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{21DAF70B-8492-4728-B8A6-5EC9ED832694}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgroundseditor.exe |
"{21E619B8-1954-4E9B-AF6D-AE06CBC60D8D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bioshock\builds\release\bioshock.exe |
"{21E89F97-BD59-4CA5-9147-3ACDC65AFC4A}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp.exe |
"{2295B90B-067D-4E35-9388-0BD6013D717C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\eufloria\eufloria.exe |
"{229D7AC0-FE62-4C44-8FC4-5B081466E97D}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\the ball demo\binaries\win32\theball.exe |
"{231B9BB6-F899-4EF1-84C8-A1731698460F}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\call of duty black ops ii\t6mp.exe |
"{233AA831-9EB6-4FA3-8660-F6BC9458D2D9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\payday 2 beta\payday2_win32_release.exe |
"{235F71AB-F97E-41DC-85C3-4A4E78963D01}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dota 2 beta\dota.exe |
"{2379E439-53C1-46CE-A437-E871747151BA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\blocks that matter\btm_launcher_win.exe |
"{23AE5BFF-827F-456C-BEC6-D9A90918539B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\lume\lume.exe |
"{23BE88CC-5992-4FAE-B069-3F1D26470550}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\nmrih\sdk\hl2.exe |
"{23ED4DE6-71BA-441B-843B-A326EA52E70B}" = protocol=6 | dir=in | app=c:\program files\mcafee\managed virusscan\agent\myagtsvc.exe |
"{241C96AF-F0FA-4C16-9453-E4F5A7A28C78}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\hoard\win32\reuben.exe |
"{24B16327-FBC7-460E-B221-C9DA8B035295}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{24C64809-C09E-4320-9B0E-87057F7BBB2B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{24EC47AF-3F3A-4172-BF3B-7CF3BD88BEAD}" = protocol=17 | dir=in | app=c:\users\attila\desktop\qq games\qqgamesd.exe |
"{251B1019-9A8C-4FA8-934A-666DEB9A70D8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\payday 2\payday2_win32_release.exe |
"{252973E3-A1E4-493C-BAAE-D5F4D071EF01}" = protocol=6 | dir=in | app=c:\program files\aim6\aim6.exe |
"{25970724-AD13-4080-BA0A-6F3B261A9F21}" = dir=in | app=c:\program files\zecter\zumocast\zumocast.exe |
"{25CABCCE-6A48-4185-B333-662CE3AF305C}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\support\ea help\electronic_arts_technical_support.htm |
"{264F5DA3-4B9F-479F-8A87-988ABC5ACA75}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\portal 2\portal2.exe |
"{266CE218-C781-4FB8-AB8B-3C55D6D6A7BD}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |
"{269C80FC-DE2D-4ECA-8C78-7865AF8536FC}" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{26A385EF-5806-4598-8D15-05A0E075F8A4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\penumbra overture\redist\penumbra.exe |
"{26E9A46F-0248-44F0-98D1-D5DB4C87F9EB}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{2752CC94-9992-4653-8B16-2A27B92A6F8F}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{2784E961-FF4D-4BFC-A7F1-030AA4A3AAF3}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\brink\brink.exe |
"{27D06497-C2C8-4665-A211-03A68DA24CD7}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{28119758-7C83-4F91-BEB5-4B1EF0DCD615}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{28B9A070-6FF1-46F7-92E8-C4C5017F6006}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds\shadowgrounds.exe |
"{28D11F86-D408-4388-8AC3-FD53C749A357}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\alien swarm\srcds.exe |
"{28FE3938-B9C2-4128-B238-2010310F4BB1}" = protocol=6 | dir=in | app=f:\steam\steamapps\just2damndgood\half-life\hl.exe |
"{29BE2766-3B1B-49BA-9F72-4B109CA72404}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp_launcher.exe |
"{29C5CE4D-F2AC-44DD-973F-1263EE02A487}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{29D8B139-A8E1-4AD4-A40C-9E8E383A216A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{2A05912C-1218-4BF4-922D-3E70D854BCEE}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\trine\trine_launcher.exe |
"{2A256D77-9967-4C36-886F-8839975233DB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{2A2BDD8B-1BB7-409B-8599-A8A285FCA8B2}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\beat hazard\beathazard.exe |
"{2A41E739-43B0-4547-BAE5-917C600B9353}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{2A7FC021-E63E-4D1E-B47A-B9C4126701C8}" = protocol=6 | dir=in | app=f:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{2A92C6C1-3624-4B4D-81A7-8146478A4B7E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{2AED9E95-3B2A-4C3B-9B31-6FB538348E1E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\back to the future 105\backtothefuture105.exe |
"{2B65CE3D-31E9-4A68-A461-427492104460}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the first encounter\bin\samhd.exe |
"{2B86FBD7-E605-47BA-B069-9567C19C99C6}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\rhythm zone\rhythmzone.exe |
"{2BB56EE5-4B12-4ABD-9914-B320A66FFDF1}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\hammerfight\hammerfight.exe |
"{2BBD0FDD-1C66-411D-A59D-F418ED26FFB7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aceofspades\aos.exe |
"{2C05E22B-37A3-4D49-9913-D0844E20C199}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\overlord ii\config.exe |
"{2C9BCCBE-A1F3-4FB3-92C4-4DD9EE3839A8}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{2C9D6464-0B2E-40DD-A567-0E19EC8EBC60}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{2CA6A4B0-0E78-48E6-A2E5-1AF2B4A29542}" = protocol=6 | dir=in | app=d:2\steam\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{2CEC02B1-C7DC-475F-87CC-3BBD5B31FD4B}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{2D4B5B91-447F-481B-9A14-A2B89546BC78}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\beat hazard\beathazard.exe |
"{2DBD1E85-74CE-49BB-BA7F-6123C0483BBC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp.exe |
"{2E2159A2-7A96-49EB-9195-1EC7D10E62E6}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\world of goo\worldofgoo.exe |
"{2E26D21A-9CA0-4A21-9F4B-DB00A4F10301}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{2E7184E8-5716-4B5E-9514-F196DEF1BCF2}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds survivor\survivor.exe |
"{2E827402-2FBA-49F5-8ECC-F4C899CF3752}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\saints row the third\game_launcher.exe |
"{2E91E580-A22A-4903-AE98-93CF1636ABCF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\terraria\terraria.exe |
"{2EC8BFA1-3D85-4E41-9996-701CC706F93F}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\dota 2 test\dota.exe |
"{2ED948D3-122B-4D19-8C51-8A5153950986}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\alien swarm\swarm.exe |
"{2EF0E6ED-1F06-467D-AEA6-5298BCFDC925}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\company of heroes\reliccoh.exe |
"{2F6E7709-770C-4AE9-9901-B02B74042E63}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\fallout 3\falloutlauncher.exe |
"{2F87E68A-82EC-45CD-9C0D-B97007C953C0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{2FD82134-16CF-4B8F-B616-636D32EE04E9}" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |
"{2FE4DB23-4D15-4028-8653-414F774C3259}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{306E11D9-9FF9-4E86-BB0E-D006256EF6D8}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{308E188E-645C-446A-A60B-91B62D07CDDC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgroundslauncher.exe |
"{30A7B620-72D6-41A5-BC27-810750A23990}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\tinyandbig\tinyandbig.exe |
"{315F01F4-1E02-4F9D-92B6-A9AECF5AAA5D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{316CAEC6-5C06-483C-8EB2-361707393049}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\castlecrashers\castle.exe |
"{3178071A-BF65-47A3-A4CA-3A086AC894AA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\penny arcade adventures on the rain-slick precipice of darkness episode 2\rainslickep2.exe |
"{3180FDF5-1CA5-4656-A17D-4E43D74E2A11}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the last remnant\binaries\tlr.exe |
"{31CDFA2A-DD31-4B0A-8609-D24E04AF00F9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\arcadia\act.exe |
"{3253C886-E189-4D15-B72C-4233DE943E66}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgrounds.exe |
"{327C4AF5-9BA1-4AE4-8E61-DE61F7AC91C7}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{32AC4DA3-674B-44F0-BBD1-370CEAD5CF9D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bit.trip core\bit.trip core.exe |
"{32D6BBA2-B6F3-44E0-96B7-8CE5BDE3A4C2}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{32D7A90B-8C18-47C3-9915-0859935C6634}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{32E05631-AE42-495A-9A3E-EFC24A4712B8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\trauma\trauma.exe |
"{330B4908-AAC3-45C7-8026-B78159AC48BB}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\tropico 3\tropico3.exe |
"{3313E3CB-1072-45A0-A089-D2B40C8B4588}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\nightsky\nightsky.exe |
"{331CE463-2F6A-4482-B5EA-11D5BF52CE74}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\back to the future 103\backtothefuture103.exe |
"{33457608-CDBA-48F9-8543-C263F5369F86}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\osmos\osmos.exe |
"{339C7B6F-608E-4030-BF40-EA9E8E508A89}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\aquaria\aquaria.exe |
"{33C16F4E-B9E6-4B04-8DFA-F7F146A9CF6E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{33C8040B-CC33-4693-9F76-D08B441DCC7C}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{33D5854F-C278-4601-8486-376EA16023FC}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{33EF7795-9D02-4972-86AE-0421333F1F34}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\stacking\stack.exe |
"{343B6A26-DA5E-4DC0-9B16-C0AB132B1396}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{34798A7D-E8E4-4070-90FD-D6F9C1F3EED8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\english country tune\english country tune.exe |
"{34851B11-FEF2-4766-B254-67358245341A}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\hotline_miami\hotlinemiami.exe |
"{34A11A0F-223D-4804-A9EA-A71F583C57C9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\penumbra black plague\redist\penumbra.exe |
"{34E78DE2-FDDA-4E47-BC54-399A3F32BBA8}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{350F8B52-C5F0-453E-9D8E-B021006459D9}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{3524FB65-6976-432C-8E05-E5E927920DFA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{35274F2D-12A5-47F1-8BB8-BD3436669BC9}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{35422EDD-417A-4CFB-BDC7-12C3E58566A6}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{35640119-A66A-47E4-8CA7-34C8A8FC6920}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds\shadowgrounds.exe |
"{35AA4FA2-774C-4920-BF91-C2FE5874F15D}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\lume\lume.exe |
"{35C3EAD6-6634-4514-997F-06DB4B613978}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\ben there, dan that!\btdt.exe |
"{35F6BFD9-C59C-4418-8BE5-53D60906D7F2}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\beat hazard\beathazard.exe |
"{36094D66-5F77-4F0D-B8F7-3F6715C86188}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\fable 3\fablelauncher.exe |
"{363530EC-DE1F-4FCC-83C4-6DB21D513CC2}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\reus\reus.exe |
"{3636D190-709B-4A38-BF67-AAEBF3B87CCF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\ftl faster than light\ftlgame.exe |
"{363E93C0-8A4B-4AF0-BCD1-64405E9CB420}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{366D09C1-B849-4260-B190-6CF1AEE51377}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{3679F50A-4F06-4B2F-B270-1C1FFB59FC19}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{3697FE0B-FA7D-4864-8B26-062D09E29036}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{36AD75AB-149A-4E1D-BFAC-8438A4EB4C66}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\super meat boy\supermeatboy.exe |
"{36C3D630-9BD2-405B-A8BB-D07AA80A4D18}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\trine\trine_launcher.exe |
"{36D9B5CD-F6EB-4C3D-8056-26CB5CB3C3E4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bit.trip fate\bit.trip fate.exe |
"{37096AAB-913E-4B58-84C1-B600AB533FDD}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fearxp\fearxp.exe |
"{3712E734-BD5E-4D91-B4AB-2B01C3D2B831}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.2.10482-to-3.2.2.10505-enus-downloader.exe |
"{37217C64-4EBA-4BA5-953B-D004770D4C29}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{3736D170-448A-4288-97FC-ECF92FE7C872}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\penumbra black plague\redist\requiem.exe |
"{37B74D1B-016B-44FF-B57C-BC7FDE1B6B3A}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{37C20C46-606F-4020-B8D1-CF5A963E733B}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\beat hazard\beathazard.exe |
"{3812D6B7-A289-4AD9-B5D7-797FD3D27123}" = protocol=6 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe |
"{3821A537-151A-4A06-B14F-81C42D4BF09C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\burnoutconfigtool.exe |
"{3825F89D-E9B8-4468-899E-D462BC8E150B}" = protocol=6 | dir=in | app=f:\steam\steamapps\just2damndgood\counter-strike source\hl2.exe |
"{3837AC05-505D-41A2-91E2-2F26D80225C8}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{3854113F-6912-4CB9-AA39-A1CFFA2D3F48}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{385AC803-E476-4ECB-A32D-8F5FCCC24CDD}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{38A09D98-B682-4B43-9DAB-5DCB365DC803}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the first encounter\bin\samhd.exe |
"{38C098A4-D9FB-4E15-B74E-B566A12EDEDB}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{38E6A1F1-A998-4232-8CF3-F116CC6CA448}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\game_launcher.exe |
"{38E8AE8A-084B-4E0A-B988-C232D474D031}" = protocol=17 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"{39669D52-3084-484D-9D90-8AD5EA3DDCA9}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\frozen synapse\frozensynapse.exe |
"{398071F5-7D3E-4DFF-9ABD-C205C7285382}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dear esther\dearesther.exe |
"{3A368CD1-3705-40C8-89CD-1194EC03D970}" = protocol=6 | dir=in | app=c:\program files\world of warcraft\launcher.exe |
"{3A9EA90E-F4FC-4B0A-82FC-1862237006EA}" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\garrysmod\hl2.exe |
"{3B3EA459-D862-4898-8E62-96EE172A6BEF}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\penumbra black plague\redist\requiem.exe |
"{3B46B221-D0F0-446A-8602-994421326440}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\proteus\proteus.exe |
"{3BA52027-7167-45A7-9759-FD16BFB02286}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds survivor\shadowgrounds survivor launcher.exe |
"{3BCB9852-F6D4-4431-BF94-7478FA6785F5}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{3BEF4EFD-5353-46DB-8B02-809CD7A332B3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\beat hazard\beathazard.exe |
"{3C20A6AA-F8A6-467C-AFE9-EB28AEC28E53}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{3C72A566-2E08-432E-8ECA-3AEDD73D155D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dota 2 beta\dota.exe |
"{3C7BB41B-583B-484F-98FE-3D0133567FB2}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{3CA08235-68A4-4215-A3CD-62DE09CB3CE9}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\back to the future 104\backtothefuture104.exe |
"{3CA3FE53-CF00-4F47-BCE0-85E5FAD75A0D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\saintsrowthethird.exe |
"{3CAC1F10-9F02-4D65-8E15-7323B72B6523}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\trauma\trauma.exe |
"{3CCABC5E-527A-42D7-A567-8977A8395EAF}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\support\ea help\electronic_arts_technical_support.htm |
"{3D0CD4A2-422E-411D-A074-DBB7701AB765}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\lead and gold gangs of the wild west\lag_win32_public_dev.exe |
"{3D1E3C21-BF7C-479A-83FE-789DCF567B39}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\portal 2\portal2.exe |
"{3D2EA000-E06D-417F-BAC2-1D405D04D1DF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds\shadowgroundslauncher.exe |
"{3D2FC306-0F09-4D7F-9DC2-92E27E810A44}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\crysis\bin32\crysis.exe |
"{3DC3CB2C-ACA3-434E-825F-81E82DEE3814}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fable 3\fablelauncher.exe |
"{3DCBEC7A-DF7F-4A25-98FC-45282EACBD62}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\penumbra overture\redist\penumbra.exe |
"{3E6DFDCF-2706-46AD-B4C9-8FB670CAB178}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the binding of isaac\isaac.exe |
"{3E73BAE6-1165-4C2E-91FA-BD2ADBD38E0B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shadowgrounds survivor\shadowgrounds survivor launcher.exe |
"{3EC14C72-7B6E-4F4E-95B3-B8D84C716649}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{3F15BCA6-3F8E-4D3D-94DA-9D8B908C03BC}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{3F1F5DAA-66F9-4700-B1E9-972E4C39A76F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{3F456A6A-3F2F-4310-A22C-0297B3A063D8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\skullgirls\skullgirls.exe |
"{4034E02F-9BBC-4425-AD28-39E05C920D4A}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\warframe\warframe.exe |
"{40448E88-21C3-4EC2-9B06-551306B588ED}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{4047F5E9-5433-4FBB-B661-C973B2808DB8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{404E11F0-B76B-4D86-9968-AB4E142DBF7D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dead space\support\ea help\electronic_arts_technical_support.htm |
"{409FF50B-B53E-47D0-AE9E-CD154237811A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\remember me\binaries\win32\rememberme.exe |
"{41D998CB-8AB0-4FC2-85FE-E05ED5D3F155}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\crayon physics deluxe\launcher.exe |
"{41DE0752-5895-4142-96C3-2D5816C9DA3D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\on the rain-slick precipice of darkness - episode one\rainslickep1.exe |
"{41E367BA-127A-4A66-8528-04C8768EA0E0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\left 4 dead 2\left4dead2.exe |
"{42593D2C-DFCD-4BCA-9FF8-F1C0408F7545}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sonic & all-stars racing transformed\launcher.exe |
"{426ADD26-FF43-46CF-87BF-3046A1453A74}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\overlord ii\overlord2.exe |
"{42C33926-F9A1-406F-91B4-80A047756417}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\l.a.noire\lanlauncher.exe |
"{42FB462F-3512-4AC2-8C96-439A4323F348}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{43D4C483-6B7A-4722-B492-41F86AF9448A}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bit.trip void\bit.trip void.exe |
"{43FEA81A-8150-4E2A-842B-619E4A0BA926}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\l.a.noire\lanlauncher.exe |
"{44221065-99FB-4E13-AACA-71FBF48404E1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\saints row iv\saintsrowiv.exe |
"{4446F6A2-2571-4AB8-9688-CC8542935E45}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{4471D309-1BCD-42F6-88C6-42413DB4B3A9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\overlord\overlord.exe |
"{4537447D-430D-4998-9D36-EA27CBEF4908}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{45474092-BD1A-4AED-82DC-40678CBEBCE2}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\darksiders\darksiderspc.exe |
"{46AFCE18-9E98-43A0-B988-D57B9EDB0762}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam 3\bin\sam3_unrestricted.exe |
"{471E2464-D3CB-43A1-BE16-EBDB05D57AD2}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\overlord\overlord.exe |
"{47337288-4D44-4003-AF43-05C186364DD6}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{4735DCAF-D05A-4FA0-9804-C0D63C7FF227}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\shadowgrounds\shadowgroundseditor.exe |
"{4772DC24-2225-46FD-9B9E-26A3F4FA99D1}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\shattered_horizon\client_exe\shattered_horizon.exe |
"{481940F6-FDA3-40F9-AB38-915E2E3F69CE}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\beat hazard\runme.exe |
"{482A36A6-2F64-4234-9E58-ACB50535DFDB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\burnoutconfigtool.exe |
"{487B1E28-1962-4D4A-B390-5AEB6E4C7761}" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{488B61A9-C21A-471F-ADAF-70A4BDC136AC}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp.exe |
"{48AE21AB-EAE6-4833-8AB1-7C27115C9E10}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\magicka\magicka.exe |
"{48B6504F-5A39-4CE8-B891-FFF329C4B575}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{48F5A425-6F66-485E-8CDD-5BA61F218BFE}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\saints row iv\saintsrowiv.exe |
"{4916CECD-6367-4DAF-9381-D0ED6110A12F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\back to the future 103\backtothefuture103.exe |
"{49318042-A3CB-41DF-9E01-BEDFA47D29EE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{4963E8B2-F259-430F-83AF-967448B27342}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\penumbra overture\redist\penumbra.exe |
"{49C84E15-4C7A-4D38-8470-651116A09F4E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\magicka\magicka.exe |
"{49DA297D-FCD7-4B17-954D-04652B90FF19}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\brink\brink.exe |
"{4A1DE14F-A779-4438-B962-DC156C64D121}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dota 2 beta\dota.exe |
"{4AE1E486-959F-4438-AF06-52CEBCB1BBF7}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\metro 2033\metro2033.exe |
"{4AF9F062-52CC-4EA4-B7B3-70BBECCE0AEC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sanctum\binaries\win32\shippingpc-sanctumgame.exe |
"{4B148989-ABD7-43E5-89EA-4EFE3EB07D9D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{4B4F2A2E-DA26-425E-83DA-F9F676242A82}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\dino d-day\srcds.exe |
"{4C24D302-B390-4D50-81EC-740CEBD8D30E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{4CA954A9-8E2F-4CE6-AD40-D576FBD796DB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\support\ea help\electronic_arts_technical_support.htm |
"{4CBD3063-2F15-4C7F-BE5F-7FA16310ACB8}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{4CCE1695-88F8-411E-89BB-8EEF63668382}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\penumbra black plague\redist\requiem.exe |
"{4D15FCF4-7B09-438C-9AB6-7DCBC5B1BAD0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dust an elysian tail\dustaet.exe |
"{4DACCAAB-6C64-445C-83B7-335E89CDD579}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\dino d-day\srcds.exe |
"{4DAFF973-1F45-4195-BDBB-2AEB6189E45B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\majesty 2\m2editor.exe |
"{4E029B2C-BAAA-4DF0-A238-A0341A46A477}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{4E10E116-6499-494F-BB55-DA0B7B13D5B2}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\proteus\proteus.exe |
"{4E2053A4-3264-41C3-B67D-44713CE5654A}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\back to the future ep 1\backtothefuture101.exe |
"{4E209D0D-1FD6-4FD2-BF75-F6E58C75ECB1}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp_dx11.exe |
"{4E339139-89A6-4AA9-B023-EBC5E96FA392}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp_dx11.exe |
"{4E5A5591-A557-4831-BD0F-4F9822FE380D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\from dust\from_dust.exe |
"{4EC2C438-48B7-4982-A368-B583601C38E2}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\just cause 2\justcause2.exe |
"{4EF219F8-51A4-408B-AECF-564B9CB11100}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\mass effect\binaries\masseffect.exe |
"{4F0071F9-B1B4-4AD9-BF7F-18AAA185F9BE}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bit.trip void\bit.trip void.exe |
"{4F0DA8D9-0B3A-4313-93E5-FF447E60C6B5}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\overlord ii\config.exe |
"{4F358D5D-2897-49D5-8457-45F413EF306C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\black lake prototype\black.exe |
"{4FF8343B-1780-48DA-9AFC-5155FD81AFDF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\overlord ii\config.exe |
"{509D54FD-314D-42FB-83A4-05369CC2A9E1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dead island\deadislandgame.exe |
"{50E5EB7A-8658-4FCA-AAF4-A6B2FC197F75}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\nmrih\sdk\bin\hammer.bat |
"{50E7F62C-1ABD-407D-ADED-AD4EADC82F8F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\crayon physics deluxe\launcher.exe |
"{510744D1-74B9-4CC8-A3C6-8BB6682AD58B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\metro 2033\metro2033.exe |
"{51202FAB-EB94-4C88-BC51-1EE6211583AB}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{51B3091B-1DC5-423A-BB99-2972F405B1CE}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\microsoft flight\flight.exe |
"{51E84D33-4BC3-4627-AC12-5902656283AD}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{52192523-810D-4FAD-B485-17296E49168D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mass effect\binaries\masseffect.exe |
"{52892B51-763E-423C-9D07-4E2F6F3894B0}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\majesty 2\majesty2.exe |
"{52BA81C0-63B7-4B3B-89B6-991F8D351196}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mass effect\binaries\masseffect.exe |
"{52BFF44B-2973-4094-8087-D1DCA90E17D1}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp_dx11.exe |
"{52EAA257-DF65-4664-8CCA-5863DA25A3FD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bit.trip runner\runner.exe |
"{52FA3109-866B-46C4-B555-3A018075E9CD}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\left 4 dead\left4dead.exe |
"{531913C8-B417-428F-8852-02638EE564AB}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{532DC6E5-C8AC-4605-A63F-68CD3BEB1436}" = protocol=6 | dir=in | app=c:\program files\aim\aim.exe |
"{5378BFDF-ADC5-48C1-B74A-B80A617A0FF3}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\back to the future 103\backtothefuture103.exe |
"{5381979B-EBD4-4E96-ACC9-4BE43C0BE6D8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\organtraildc\organtrail.exe |
"{538EA4B5-3C14-4CAF-A336-21D76A3F9FF4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{53EF498F-F15D-4CA5-AA7B-22BAD3BDCB10}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{53F07FC8-FE58-42B9-B94C-025FA1DEF37D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{5428509F-17E3-41D8-8D2A-1381ABEDFCE3}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{544D83A2-816C-4773-9AD0-92510C2316B5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{54517A36-A93A-4E65-B79E-58BB28610A63}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the binding of isaac\binding_of_isaac.exe |
"{546CA927-EB30-4D35-8B41-752999155E14}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{54F163B3-2EDE-4248-BBAA-1B92B5E07163}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the wonderful end of the world\main.exe |
"{55B6A756-CB6C-419B-BFA0-F49981D9A6BD}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\super meat boy\supermeatboy.exe |
"{55D5B934-C5C6-49BF-BCC5-E3F44506C868}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |
"{5605CCA4-FFD7-4E1D-AD74-8CB70C197C52}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\hotline_miami\hotlinemiami.exe |
"{561CA4D1-79CE-4F85-B04F-0496FA6DD765}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{563F49CE-696F-4C11-B6CF-919476D2A023}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\cargo commander\cargocommander.exe |
"{5686AC78-BAB5-4308-9FEC-87FD119F9643}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\garrysmod\hl2.exe |
"{569F3570-DADC-4042-B6F5-EAF03F872FB4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{56CC22F1-800A-4A49-A90F-B62CD4B05565}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\crysis wars\bin32\crysis.exe |
"{56E8BFF9-18A5-414D-B04E-9DEB68F4F441}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{5772D47F-0611-4D63-8576-08770C7A350B}" = protocol=17 | dir=in | app=c:\users\attila\desktop\qq games\update\update.exe |
"{5792C92D-6E51-4145-A1EA-1A1B82F9B0F9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\company of heroes relaunch\reliccoh.exe |
"{57F534A8-09E2-4F5C-8568-629F4462156C}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{58ACE65F-2BFE-43C9-B010-F2277D41733B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{58B49DC7-92D2-4E63-B2EB-6BE9DBB67308}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\brazen\brazen.exe |
"{58C4D232-9A90-4259-B794-4F4C773D9EA2}" = protocol=17 | dir=in | app=d:2\steam\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{59287431-F3F5-4029-AAE0-9AA61CA818AD}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.1.3.9947-to-3.2.0.10192-enus-downloader.exe |
"{594C9CEC-744A-4A9F-A292-8D082F0054D4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\blocks that matter\btm_launcher_win.exe |
"{5A6831A2-82B6-46F3-9D98-BCA2028A2594}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{5B090226-0002-4383-80DA-7D0DDC2112A1}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\edge\edge.exe |
"{5B2E917E-25D5-4F5C-8CDC-B7795ED705AA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\game_launcher.exe |
"{5B41C058-5A3C-4405-8170-A435FDE5CB7A}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\dota 2 test\dota.exe |
"{5B45D007-0F0C-45E9-9DA3-9B1818327CDC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\overlord\overlord.exe |
"{5B625D2D-8220-4A11-B8E0-120CD44C5B37}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\rhythm zone\rhythmzone.exe |
"{5BA4A1DA-BB9E-4F59-ABB7-FCAB91F65B2D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam 3\bin\sam3_unrestricted.exe |
"{5C03E646-95A2-495D-9588-844DF6C527C7}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\beat hazard\runme.exe |
"{5C9F3BFD-CE95-40D8-8CAF-630EDCDDD067}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds survivor\survivor.exe |
"{5CEC75D0-9D54-4E17-A967-27F4838F0F8B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\simcity 4 deluxe\support\ea help\electronic_arts_technical_support.htm |
"{5CF89112-6668-4209-A0C5-2315255ABF6F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\dead rising 2\deadrising2.exe |
"{5D7019D7-09A1-4957-ACB6-F1CBC53C6785}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bioshock\builds\release\bioshock.exe |
"{5DF535E0-5B9F-4BEF-841D-8EF47B59490F}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{5E6AA926-2796-4FFF-B3FF-889AFF86070E}" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\garrysmod\hl2.exe |
"{5F7076CE-298A-4B79-B208-8C3D924B5E3A}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{5F93BA94-931A-48CC-9100-C7B3E14C4E2A}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dota 2 test\dota.exe |
"{5FB270BA-5C94-4CE4-914E-E90E42C2145E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\anomaly warzone earth\anomalywarzoneearth.exe |
"{5FD4BEEB-861E-4023-BC67-9C5237FBE7AF}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\arma 2\arma2.exe |
"{5FF47379-C1F0-4F39-93C3-C14BA798D802}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{5FFD6F23-3EB6-4823-8B91-0676787EAF50}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\super hexagon\superhexagon.exe |
"{6021EB54-29D0-4B45-95D2-AB091AFADFC7}" = protocol=17 | dir=in | app=d:2\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{603477B0-245A-4E2A-A9BA-FD2A4DFB83D5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{607057B6-37D4-4D16-AA37-4C901E9C6998}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\oddworld abes oddysee\abewin.exe |
"{6087F97A-0010-437F-AE13-A121261FA805}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{60A72873-4531-4379-9A97-520A6798012D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\titan quest\titan quest.exe |
"{60B99BB6-E817-459D-893D-F58602CCA8AA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\steelstorm\steelstorm.exe |
"{60CFE733-3CE1-4B68-B9C5-C4340B6E7FF3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\arcadia\arcadia.exe |
"{60D9A045-FA5A-4D11-8E7C-B77A2EBC3D84}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\lucid\lucid.exe |
"{610D3BDE-E790-468B-A330-AAA93E079801}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\gratuitous space battles\gsb.exe |
"{613BC88B-3FAD-4338-93E3-263A666D49F0}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\thepolynomial\polynomial.exe |
"{61AD2940-ECC5-4205-9F0A-F4852FF1F152}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{61D87531-7487-41DD-BB90-5A5D5F80BE18}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{61DF1395-3AD5-4383-A900-1D0CF631340D}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{61E6941C-2E41-48FD-81E2-C58EEC082D92}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\overlord ii\config.exe |
"{61F2F946-6074-4E0E-822F-1D2ACBF33104}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords.exe |
"{621DE92B-6BB7-4C89-AEBB-CB4BCC198369}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\osmos\osmos.exe |
"{62208CC6-18AD-4B44-A420-6DBF3C453786}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bittriprunner2\runner2.exe |
"{62351372-074B-4E5E-AF87-A7BF83B22732}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\bully scholarship edition\bully.exe |
"{630097C4-22B9-4BC5-A410-EFCD55E10B47}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\alien swarm\srcds.exe |
"{6358CE9E-5D17-4BB8-B14F-2704FDA9C9AE}" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\half-life\hl.exe |
"{63B243D0-B5AF-47C2-8BB0-FAAD9DFFD781}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\from dust\from_dust.exe |
"{63CE7303-00EE-4BEF-8165-0FD650C6F9A1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds\shadowgroundslauncher.exe |
"{63CF172A-D90D-499F-AFA9-301D9FD079D2}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\maplestory\nxsteam.exe |
"{63E80568-8979-43B8-B815-D0F993CBE58B}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto 2\gta2.exe |
"{64286707-B097-47FF-8D7B-53E7DAB4CF9E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{646E6E55-6A79-49FC-AEE8-3233CE3A8669}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\simcity 4 deluxe\support\ea help\electronic_arts_technical_support.htm |
"{649FD25A-EC0B-4FE0-81D2-B1591DB612B9}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\powerdvd.exe |
"{64EE9DB9-D5DD-4B27-8DDA-A254B1C83A50}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\total war rome ii\launcher\launcher.exe |
"{6519BA57-E749-4B3F-AD0F-2F950F3C0B8A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\super meat boy\supermeatboy.exe |
"{652EF435-DE13-4872-B3B2-F6DC25279E81}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\autonomous prototype\launcher.exe |
"{65FD064D-6313-44E7-8EBF-AA111FF51CAE}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\grand theft auto 3\gta3.exe |
"{662D5BC6-C777-4BA4-AFF9-CF1B03E44C51}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv beyond the sword\beyond the sword\civ4beyondsword.exe |
"{66440F8E-1F17-48A0-AD50-EC874F7016EA}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{66A2C577-EEC2-4314-A6DD-6A35233E8394}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\arcadia\arcadia.exe |
"{66B89E7B-5B61-461C-BE99-6B1329F5E3EC}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\capsized\capsized.exe |
"{685A4114-D9AA-4B30-90C7-1FD8AC994A1E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp.exe |
"{686454D1-80C9-44AF-8E1F-8B5874ED373A}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{68C6F7D2-6E75-423D-9B6F-9629A2601B9B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\total war rome ii\launcher\launcher.exe |
"{68D7F5B1-CDCB-4CF4-BB02-4652B37B9FF2}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\brutallegend\brutallegend.exe |
"{68E9139A-4B5F-448C-A10D-CDA1E24D0551}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\overlord\overlord.exe |
"{68E9F8B6-95EE-4B32-BA85-225E5A9F52F9}" = protocol=17 | dir=in | app=f:\steam\steamapps\just2damndgood\counter-strike source\hl2.exe |
"{694F3D8E-0F14-4BAF-8324-BE15BF84E755}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{69E573B4-8AF2-4F26-B306-3C216D490A7F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{6A00779A-257C-414D-BE18-379608A05017}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{6A2E6AAC-0E46-4534-8F6C-4C55B9B81284}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd_demo.exe |
"{6A6DA090-B698-4D10-80FE-FD872B0A8C47}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe |
"{6AE1F914-C7A3-48D0-805A-9CA434ADD71C}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\crysis 2 - demo\bin32\crysis2demo.exe |
"{6AF418C4-9331-4A1B-8782-85C8B6D2C410}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto 3\gta3.exe |
"{6B2EAE9D-B812-4BF6-9508-300253E24F3D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\limbo\limbo.exe |
"{6B471D18-6FC0-4602-8F6C-7A2B3C8D8C92}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{6B663702-EFD8-4984-B53C-129AFA4DF98E}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\aquaria\aquaria.exe |
"{6B950177-D108-4654-BDCF-AB9A73E2D046}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dont_starve\bin\dontstarve_steam.exe |
"{6BD1040A-0B6C-4C4E-A825-5AA1AD25E2EA}" = protocol=17 | dir=in | app=c:\program files\aim\aim.exe |
"{6C008C85-B175-43B8-BCAA-61DB656CE3AA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\arma 2\arma2.exe |
"{6C5E61B5-2B57-4C25-805F-D248A7054553}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{6C74E593-3B08-4CD5-B36C-8D205CEA5F15}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{6CC6126B-3C8A-498C-839D-248AAEA105BC}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{6CD92362-4642-4A34-B863-F42DAE304F94}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dynamite jack\dynamite jack.exe |
"{6CE9BAE1-4F48-47EB-B592-D58D68B6EEDA}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\swarm.exe |
"{6D4CB847-166D-42AC-A55D-108E8BA86CD4}" = protocol=17 | dir=in | app=c:\program files\starcraft ii\starcraft ii.exe |
"{6DFE0C08-252C-4659-983D-C5272CE3DA90}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{6E060105-E5B6-4F7C-A785-C102C4128A54}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\hoard\win32\reuben.exe |
"{6E3BFE77-9ABE-4A86-B26F-D924AC31A930}" = protocol=17 | dir=out | app=g:\steam\steamapps\common\warframe\warframe.exe |
"{6E3EF7F3-CC73-46C5-BFEE-4E4A2EC012C2}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\crysis\bin32\crysis.exe |
"{6E9E0007-1EA0-45B0-9BE1-3A5C1C21E3AA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\skyrim\skyrimlauncher.exe |
"{6EBD555D-26A2-4913-947F-847BC4C38CBE}" = protocol=17 | dir=in | app=g:\steam\steam.exe |
"{6ECBD9EC-C99A-4A30-B94C-87A7E1C91437}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\redfactionarmageddon_dx11.exe |
"{6EDD6D63-C5DE-4125-BAFF-493D248B5B2B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{6F3E3BA7-A51B-4895-88DA-E22B08D63A8B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\stacking\stack.exe |
"{6F454918-D7BD-4D77-8538-A31C4651FC58}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\tropico 3\tropico3.exe |
"{6F47A4E4-A214-437C-817E-709F56AC5128}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{70316609-07B3-4F4C-8017-8D928C25F0FB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\valvetestapp207490\rayman origins.exe |
"{704D78D0-C577-4B6B-A337-BA2C3AF5294C}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{70643B77-04C6-4AB0-B36A-88DAC5EAF73B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\defcon\defcon.exe |
"{70AFCCAB-0484-4FAD-BEA1-19CDA0153C39}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\penny arcade adventures on the rain-slick precipice of darkness episode 2\rainslickep2.exe |
"{70AFD548-5ADA-4056-BADA-ACF1ED500078}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{70D4D5EC-608A-4F52-A8B6-410556693E7F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bit.trip runner\runner.exe |
"{713F3334-53A7-42CE-B7EF-13854E451CCC}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\aliens vs predator\avp_launcher.exe |
"{717BBC8F-BCC7-4FA9-A534-D59FE7109F1C}" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"{7192B35D-BCFD-463C-8E19-3986003BB750}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |
"{7197A7A9-A6F3-42FE-86E4-3E3FCB95D7A0}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{71EF5E11-A584-4101-A15F-62044B74B059}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the stanley parable demo\stanley.exe |
"{720A6F80-B88F-4CBB-BC90-0603EA7E44FC}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\company of heroes\reliccoh.exe |
"{7237AD17-A9B0-4B16-BBAB-BA484879A624}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\solar 2\solar2.exe |
"{7342CD29-55DD-498D-A189-0C5150B1C65D}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{73D7E0EB-5312-44A7-8589-3994CC23F7D0}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\portal 2\portal2.exe |
"{73DC8516-CBD3-4B62-971A-8ECEE8DB3F71}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\beat hazard\runme.exe |
"{74190F1B-6CBF-4CDD-973C-A4F8606DB2EC}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\spore\sporebinep1\sporeapp.exe |
"{7449390A-39D2-4272-91F0-8C0E0E04C107}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\fear ultimate shooter edition\fear.exe |
"{7455B4C6-9E9D-4ADF-921D-DB901658AD63}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{752A5BE4-2F6F-4E77-94EE-3F398E81B9C6}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{7573CCC8-BDD5-4232-8987-6EF28D93F741}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\poker night 2\pokernight2.exe |
"{75AA5165-C244-4362-806F-8CE84E806B8F}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{75C741D6-3CEE-4BBA-8B71-B7EBF166171B}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{760066FD-C3AB-4AD0-99A9-F401674ED5E6}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe |
"{760EE0D6-A66D-496C-A55B-3F9FBB946982}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{7650CEA4-A771-4FE6-A1BB-9774B912ED25}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\orcs must die 2\build\release\orcsmustdie2.exe |
"{76A18E0E-210B-48AA-A867-F2156E728ED1}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\crysis\bin32\crysis.exe |
"{76C79A85-A569-4111-B449-DA49429E7256}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\saints row the third\saintsrowthethird.exe |
"{76F4045C-6B98-463B-AA11-722EBA98E5EE}" = protocol=17 | dir=in | app=c:\program files\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{77171D3C-4489-4971-87DA-9A5590189F20}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\overlord\config.exe |
"{77537917-5D47-43B2-87C2-5B18B171F258}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\dota 2 beta\dota.exe |
"{77799A90-5DAF-4694-8805-AB1D71838721}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\shattered_horizon\client_exe\shattered_horizon.exe |
"{77CBACE7-717C-4A35-BF83-7467DB342AA9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\crysis wars\bin32\crysis.exe |
"{782B8225-D70E-455D-AFE3-8215192C3E0F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\overlord ii\overlord2.exe |
"{789AADFE-0945-4745-9B40-83F28A5AB2AE}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\bit.trip beat\beat.exe |
"{78A22B9D-DA81-4072-8219-510FB971D778}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\l.a.noire\lanlauncher.exe |
"{78E9B8DE-02D3-4480-B189-4E0CA5F7F7ED}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\psychonauts\psychonauts.exe |
"{79059912-89EF-4D68-9D54-CD6D85829B81}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{794F0E88-CC3B-4479-BD88-03524C30D513}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{7983949B-F6DE-46CC-BBAA-FB7C76BD366F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{799362D4-9681-4F8E-92C0-736657D5BF79}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\defcon\defcon.exe |
"{79CD654C-C57A-4890-B8EC-263DCC9D2CDF}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{79CF95E6-7DEC-4064-8649-5125ECC271E7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\back to the future 104\backtothefuture104.exe |
"{79E090D9-2C57-4666-BFBB-E8FE4FC78F8E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\steelstorm\steelstorm.exe |
"{79E31B6A-16A8-4A17-A5AC-5F8FFD6CED23}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{79F61B65-57AF-4033-99DF-150214B48EEA}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{7A00FE4A-CF65-4910-8D67-8457E128EFCC}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\back to the future 105\backtothefuture105.exe |
"{7AD7783D-7F4D-4927-B66D-B00AAE65FE97}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dreddvsdeath\dredd.exe |
"{7B3EBD49-0DB8-4CE5-BEBD-BDD7B1CB8378}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{7B42541E-297B-4F4B-925E-C4B29A50E3A8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam 3\bin\sam3.exe |
"{7B8877A1-B880-493E-9F27-17944EB5C1BF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\vvvvvv\vvvvvv.exe |
"{7C09CC95-EFC7-4C41-B7FE-5CCCDB3D860A}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\mass effect\binaries\masseffect.exe |
"{7C29836A-EF7C-4380-A8A9-D90D923317E4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\jamestown\jamestown.exe |
"{7C68E08C-8C47-47A8-A822-B085E3D3D888}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\costume quest prototype\afcq.exe |
"{7C84C7B5-A161-4953-9DEF-308E0C8ED84A}" = protocol=1 | dir=out | [email protected],-28544 |
"{7D040244-4560-4EB3-9014-554E6E5F2F74}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bioshock\builds\release\bioshock.exe |
"{7D4FA9F7-D968-40BC-8DDA-19FC3103E137}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\penumbra black plague\redist\penumbra.exe |
"{7D6262A7-994F-48DB-A25E-93DCD3414D3C}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{7DD288E3-B860-4E4C-81C6-9C0E6636189A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\payday 2 beta\payday2_win32_release.exe |
"{7DDF23A1-8136-47A0-87EF-57B4BDF63D7F}" = protocol=6 | dir=in | app=c:\program files\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{7DFAAD04-E135-49A3-ACF8-B5BF1C667901}" = dir=in | app=c:\program files\war inc battlezone\warinc.exe |
"{7E00B732-364A-4C71-8BB9-A5434394CF81}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\maplestory\nxsteam.exe |
"{7E66811E-CE6D-4B96-8C95-F5356F827233}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\deus ex - human revolution\dxhr.exe |
"{7E9BC959-42F4-42DC-A5E4-C69698496B3B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\aceofspades\aos.exe |
"{7EBF3AC9-E3A9-4422-B7BF-4F5D0079CF69}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\little inferno beta\little inferno.exe |
"{7F09924D-CF60-40FD-9D42-6958D2DF92B4}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgroundseditor.exe |
"{7F2512FA-86F7-4A5D-9928-7E5718F82E31}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\beat hazard\runme.exe |
"{7F42462C-7CF8-4A40-AC9A-16AB67D24CC7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\left 4 dead 2\left4dead2.exe |
"{7F46BAC7-5761-4D29-98FE-BB2D8E95F8EF}" = protocol=6 | dir=in | app=f:\steam\steamapps\just2damndgood\arcadia\act.exe |
"{7F4A1762-B76C-4BA4-813E-163A225898E5}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\back to the future 105\backtothefuture105.exe |
"{7F4D3196-43C0-4496-B51F-0660754E8B4E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\lead and gold gangs of the wild west\lag_win32_public_dev.exe |
"{7F5BC9A3-4EE9-40FE-B464-6E8EB250A336}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\hotline_miami\hotlinemiami.exe |
"{7FE554F8-4850-46A9-A13C-0B8FBDF54572}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{801CB11B-401C-4BDC-9A36-FA156B9BED21}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\darkness ii\darknessii.exe |
"{8027B172-26A5-4042-8415-A5D14B2CB9FC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\fable 3\fablelauncher.exe |
"{802D1E0D-DF5B-49A7-A9AD-2235A88711E8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{802EE4D9-B6C7-4B75-948C-5FB171E6FE76}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\brazen\brazen.exe |
"{80797FDE-4799-4B46-AE69-DD1106D77110}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv beyond the sword\beyond the sword\civ4beyondsword.exe |
"{809E8C96-42DB-4B28-8ABA-AB178DBDF239}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\_runa2co.cmd |
"{80A776D2-11B2-42E5-B62E-62EAC09F27D3}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{80C45F54-D733-4416-B8C7-DF09B83F02D9}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{811AEFA1-8AFA-4E95-BF0E-029BA4F128AD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\uplink\uplink.exe |
"{812C2F19-FFF6-44E3-BB50-5CDE46B19216}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{81939282-2BC5-446C-886C-4AAF6737A184}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\overlord\config.exe |
"{81A76CCA-7990-4860-B39A-B18B2DF3F039}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{81AE80BA-F018-4880-BEDD-A6248CB2489B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\bastion\bastion.exe |
"{81D2B381-8E43-4228-93AB-3E2F053E1F71}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"{81F6146F-DD65-4F41-9EC8-9712082D0E49}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{82778A8A-BEA5-4B08-A1B8-3E584DF5DFA0}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\and yet it moves\and yet it moves.exe |
"{8288DDDB-F66B-476C-A778-BA5A17C1DE35}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\lucid\lucid.exe |
"{828D3143-3AB0-48BC-B384-F4B35E3A7698}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{829AC418-2230-41E4-863C-9784499B7BD6}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mirrors edge\binaries\mirrorsedge.exe |
"{82AC3B51-C4AD-4A79-8E7C-341691C8A08E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{82BCE2A0-96C0-4DDD-AB10-79C3BA2CB371}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bit.trip beat\beat.exe |
"{82C2B890-BCD6-4832-92FD-FC93F6B90180}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\world of goo\worldofgoo.exe |
"{82CA5181-B271-4871-82F4-5C9900FF40BC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{82F1C851-10E5-43B3-83F0-C512D89F43E4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\time gentlemen, please!\tgp.exe |
"{82FC056D-8043-48CB-B36A-BD91E11279E6}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the last remnant\binaries\tlr.exe |
"{83226EA4-5161-479A-842D-8A278C894FD0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\metro 2033\metro2033.exe |
"{832D552E-8C3D-4613-BB38-ECB7F520CC51}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{83C729C3-2D9E-441E-9F57-F595B62D17ED}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\beat hazard\beathazard.exe |
"{83F354F0-0DB4-49E2-B6C5-14BEDBF85243}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\killingfloor\system\killingfloor.exe |
"{8436E86A-5E70-4D7C-812F-187970B06545}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\happy song prototype\afmana.exe |
"{850D47BC-7FDA-4D5E-8BDD-4F070E4C9F73}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd.exe |
"{860BB728-DB18-426A-AB92-98A8DF3E9DB5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{8639DF1A-54A7-43E6-82AA-9D5FC14C7AD4}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{864365B5-FE67-4029-87CA-6057253113A7}" = protocol=6 | dir=in | app=f:\steam folder\steam.exe |
"{86544358-A592-4905-942B-EBF690C1784E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bully scholarship edition\bully.exe |
"{86642D64-79E8-419B-A588-1A8139BE16BA}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\redfactionarmageddon.exe |
"{869FEBBF-8082-4EE3-A779-4EE0F3D12F29}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{86CFBBAA-6C74-4876-9BB7-0827CD0CCADB}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\counter-strike source\hl2.exe |
"{86DF91F4-64B8-420D-A482-77C72A1FAA36}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dead island\deadislandgame.exe |
"{86DFBFD5-9F38-4ADA-BC15-D133503CC9DC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\organtraildc\organtrail.exe |
"{86FDB5B3-217E-40ED-BEEF-9F404AED3351}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\anno 2070\anno5.exe |
"{870BF706-8A69-4719-AB68-E930E3AC87DD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\brink\brink.exe |
"{8718027C-7CBD-4B79-A14C-F631ACFA3E00}" = protocol=58 | dir=in | [email protected],-28545 |
"{87EF22B7-60E4-49C3-B214-3703BC7BCDCC}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe |
"{87F9C0EA-8CD8-4F35-A490-6EAC64228C8C}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{88707958-1749-42EB-A443-49933E03B3C1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\atomzombiesmasher\data\atomzombiesmasher.exe |
"{887D3F0E-627C-4B61-9D77-A248735068FA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\intrusion 2\intrusion2.exe |
"{889C8208-2DD8-4C84-BBF8-D60F050118EE}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\vvvvvv\vvvvvv.exe |
"{88CF3A2A-432D-4506-9F82-31CCFC2D0688}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam 3\bin\sam3.exe |
"{88D3FC03-16A0-4246-BE8D-DE36E0822B82}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{88EAD7AF-ECC4-48EB-BF47-A5BC97E070D8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\spore\runme.exe |
"{890ED694-EE23-4D7F-8297-F86B562F6DEB}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\crayon physics deluxe\launcher.exe |
"{89251266-833C-4C1B-B032-1F42766CA48D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shadowgrounds survivor\survivor.exe |
"{89C89292-C9CB-4B34-8AE8-CC89D67C194B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{89E0E541-9CDD-4519-B03B-08ABCF659AD7}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\alice madness returns\binaries\win32\alicemadnessreturns.exe |
"{89F78F7A-1FD9-46D2-93BD-AF5B775DD123}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mirrors edge\support\ea help\electronic_arts_technical_support.htm |
"{89FF6A2A-389C-4D8E-8C58-8ECF5D1AA718}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\poker night at the inventory\celebritypoker.exe |
"{8A034892-0912-457A-B1A5-C8B3DA413EE3}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\portal 2\portal2.exe |
"{8A214444-AD12-40F0-AB7D-6930E5E7AA6A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\the ball demo\binaries\win32\theball.exe |
"{8A95AFED-C405-4DF3-BDB5-3C2F1CC887F3}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{8AB7DD21-3F3B-4B74-9934-4B4F81C571CE}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{8AB9D5FB-360A-4BF8-A0DF-1DC426B12DE8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the second encounter\bin\samhd_tse_unrestricted.exe |
"{8AF4687D-5DD0-4F83-8343-8EE29016C74B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\bit.trip runner\runner.exe |
"{8B1FC28B-EFDE-4125-8211-C375E7C8F761}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\solar 2\solar2.exe |
"{8B291954-2607-4579-A1EA-5EBF9D942049}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{8B311A57-B34E-423A-9448-12A9213659E2}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |
"{8BCA424A-0CB4-474A-AA5D-18EED90A5F60}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{8BE1265D-6470-48A0-BE46-C4874430CC33}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\counter-strike source\hl2.exe |
"{8BEA0A3F-8CA1-4402-B301-7AE0AF7F96BB}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\overlord ii\config.exe |
"{8BFA48F3-4167-4C1E-8E43-48B3AB6C81AA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\recettear\recettear.exe |
"{8C3262B3-AAE5-41BF-89BC-0487CCA89CED}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mirrors edge\support\ea help\electronic_arts_technical_support.htm |
"{8C602BCD-CD33-4E37-BDA8-5187668FDF29}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\penumbra black plague\redist\requiem.exe |
"{8C80D21B-189A-4B52-A407-0271EC2AEB74}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\overlord\overlord.exe |
"{8CB38A70-D352-450A-A119-92AF4E669DA5}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{8CF62615-E84B-48F9-A5CE-F153CEA34B77}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\tinyandbig\tinyandbig.exe |
"{8D79DD36-AED1-4728-AD70-6DC7A986C64F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fearxp\fearxp.exe |
"{8DC88EF6-1E87-498F-8884-F66F9C3F0DC6}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dota 2 beta\dota.exe |
"{8DFDB181-7236-4C65-89BF-A62EE2C2D3C7}" = protocol=6 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10314-to-3.2.2.10482-enus-downloader.exe |
"{8E10D3DB-C901-4FE6-8B7C-B6942B1A2C45}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\time gentlemen, please!\winsetup.exe |
"{8E513284-2403-45F4-9436-E42B4E3C652F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\alice madness returns\binaries\win32\alicemadnessreturns.exe |
"{8EC056C1-C198-49E1-B872-89B832DDB012}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{8F53FC0F-A884-4337-8334-126EADA47CA2}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\fear2\fear2.exe |
"{8FF23BC0-8AE5-4D7E-AC5A-174AD2AB8FF7}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\arma 2 operation arrowhead\arma2oa.exe |
"{8FFF07E1-4778-4C07-85FE-7A1627391517}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{900C4E5B-0D01-4438-8B13-9E662990D725}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\quantum conundrum\binaries\win32\trygame-win32-shipping.exe |
"{901A8DD2-8835-4A14-A59F-CFDF9BBEDA42}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{907C4BE6-8C11-4C3C-9692-D9F52D9DCCA4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{907D41C5-82A5-4560-98DB-29FEDBFA1E15}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{908C60AB-0839-4F8B-8DE4-BAD66DCC601E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{908F1533-4518-4E8E-8DA2-C80C361669B4}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\spacechem\spacechem.exe |
"{90AF1754-9DD2-47BB-B1BD-9AFBA53CF1EC}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\beat hazard\beathazard.exe |
"{911D3D2E-DDB4-411B-9B79-1DB7BFDD5221}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |
"{91229BE6-94CA-4DBB-B0C6-F8E074948CBF}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{9139FBD6-89EF-4269-8041-59C1D3DBDC24}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\cargo commander\cargocommander.exe |
"{914C72B1-ABAA-4D20-9B48-3E8FC8C24998}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{91539F7F-E726-42B7-B840-AD9B87262971}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{915729A1-4C99-497A-961C-AA742CE09E67}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aaaaaaaaaaaaaaaaaaaaaaaaa!!!\main.exe |
"{915DA9A1-5EEB-441D-8418-A904D3360E92}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{917099A0-9479-4386-8E75-3FF39AC5A3B5}" = protocol=17 | dir=in | app=c:\program files\mcafee\managed virusscan\agent\myagtsvc.exe |
"{917C65BE-FD78-48BA-AE2C-61998B76325F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\poker night at the inventory\celebritypoker.exe |
"{91843D36-5DAA-4521-993E-DE8EEBCE1815}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\binaries\moh.exe |
"{91CE28C6-7919-4B92-BD1E-241F8F369A03}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\back to the future 104\backtothefuture104.exe |
"{91D8CA93-695F-4CCF-AB9E-875974B36264}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{91FE1EC5-B49D-4C93-89A9-9DB8B1585F3C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the last remnant\binaries\tlr.exe |
"{923F7CD1-BE3E-445E-ADEC-8082B9CCF9B4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\metaldrift\metaldrift.exe |
"{92941FAE-A91F-44EA-B7E6-5AC16AD2B290}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp_launcher.exe |
"{92EB3293-E706-486B-AFF9-086526F71884}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{92F98AFF-CA31-49FF-B457-FA5FD66F0F2A}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\castlecrashers\castle.exe |
"{935F9E44-5157-45F1-AE0F-241D47B4744E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{9361C235-15C3-405E-BF55-0D4ECA44A58B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dust an elysian tail\dustaet.exe |
"{94262ED7-1CA0-41BC-9FE1-D113CF36E418}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\audiosurf\engine\questviewer.exe |
"{945FBB42-9CD5-4C64-843E-923D7D25AF74}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dishonored\binaries\win32\dishonored.exe |
"{95A4E444-B578-484F-A722-40312B7002FC}" = protocol=6 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{95C95C86-DE40-4632-ACE6-B54337619C92}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\cave story+\cavestory+.exe |
"{96580AF2-8192-4EDD-83C0-A2470F2C78EC}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\planetside 2\launchpad.exe |
"{965ACF4A-6899-4128-AF87-B3038EF4BC20}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\anno 2070\anno5.exe |
"{9668FB98-3FD9-426F-86FA-5A035E00891C}" = dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{967FF845-3C4B-4FE2-B136-75FF3E38C1B0}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\beat hazard\beathazard.exe |
"{970ABFA6-F588-4FD3-BC0C-513B6810FAA9}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bioshock\builds\release\bioshock.exe |
"{9713CC37-861C-4F81-9144-4139C4AE7CBC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\anomaly warzone earth\anomalywarzoneearth.exe |
"{975B9A71-ABD4-4A8B-9FA7-7317FC7BEC4F}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the binding of isaac\isaac.exe |
"{9780F79F-6B60-46F5-B2ED-18A9FEC3A9DB}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\arcadia\act.exe |
"{97893CD9-2423-436C-B6C1-77BC5C78C556}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{978E2E0F-1809-46EC-8F94-75E1F55C5D51}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{97A17787-E241-4D7E-AE09-C7C5B5EB710F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\seriousmodeler.exe |
"{97AB24D9-D0E0-4D46-A1A1-EF6E26EDA5D7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{97BEE3F1-7F90-4277-8B66-4EC7DE5CC457}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp_launcher.exe |
"{97D6A576-D352-41E3-BD7A-A21F6ED2B36F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\terraria\terraria.exe |
"{985DF3EF-B06D-48A1-B02E-1A1C91F87AF0}" = protocol=17 | dir=out | app=g:\steam\steamapps\common\warframe\warframe.x64.exe |
"{987FB122-1CE0-4CDD-A87F-71CF0DF81B1A}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\alien breed 2 assault\binaries\alienbreed2assault.exe |
"{98825D40-BEBA-4473-9D97-640275515424}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\cargo commander\cargocommander.exe |
"{98D5393A-C76D-475C-902C-E40B14E57D9C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{994079B9-6E39-4F4E-A38E-6EA5E4654C09}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\spore\sporebinep1\sporeapp.exe |
"{99EED716-B270-4266-8005-B8BDE3AC44A6}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\gratuitous space battles\gsb.exe |
"{99F17B7C-209A-410C-9BB2-DBB3776642E4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\simcity 4 deluxe\apps\simcity 4.exe |
"{9A03B1D7-D7F8-4947-A941-A40822132BA5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\shank\bin\shank.exe |
"{9A98CE29-CEF3-4907-A5EB-A954C8780274}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{9ABBD057-84A4-44E2-A070-C5B704CA7C66}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\poker night 2\pokernight2.exe |
"{9AD2B5DE-96B8-4DE7-856C-7566F0B2BF57}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{9B64D0F2-2A18-495A-9AD9-3F02645B4019}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{9B93072B-B72A-40E8-883E-C45E33EDC54E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{9C29C377-BDA5-4625-BD50-6B159B15EC10}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sanctum\binaries\win32\sanctumgame-win32-shipping.exe |
"{9D406BB0-0C7E-42BF-BB82-F75CCD07344B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{9D7B44B3-1A18-4C8E-824C-984AB3714448}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{9E2249A3-D8B0-4FFC-A1DC-F806A2A4AD49}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\rhythm zone\rhythmzone.exe |
"{9E28B9C0-E3B5-411B-8EC5-22B4B4F18C80}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\portal 2\portal2.exe |
"{9E35330B-1460-475B-8136-8E78838A1E14}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dota 2 test\dota.exe |
"{9E8E4B09-7A8D-461E-9C9A-B66FF4246CB0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\skullgirls\skullgirls.exe |
"{9E93343E-C990-4CA8-BBA5-AFD2A195EAAA}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\magicka\magicka.exe |
"{9E990C31-5C47-44D7-B298-A61D24F94AB8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\nmrih\sdk\bin\hammer.bat |
"{9EBE7E18-8AF9-4FEF-B0A6-5C0433B8E379}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{9EED994D-3CC4-4AD3-8D89-D6E2A04DD7FB}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\overlord\config.exe |
"{9F3D77FF-9E81-4045-A46C-4967E1A3FE93}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\tropico 3\tropico3.exe |
"{9F67D36C-F9F1-450C-B4DE-90F56AB6CF55}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\costume quest\cq.exe |
"{9FB30D17-AD25-4479-8471-A256053EFDEE}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\brutallegend\brutallegend.exe |
"{9FDC6C68-B4C1-4B59-A266-A8284A4C80B3}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\back to the future 103\backtothefuture103.exe |
"{9FF6FC8C-D393-4AE2-AF0B-67CA00DB437B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\on the rain-slick precipice of darkness - episode one\rainslickep1.exe |
"{A003E68F-AE50-4558-87FB-FEC70E1DDB6D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{A038E07B-8BBC-4FBA-A75C-C17EB8529C7D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |
"{A04563CA-3318-431A-B2C4-7C8AE3666A73}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\titan quest\titan quest.exe |
"{A053BC74-F0A8-4C33-B129-8626A99EB435}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{A08DB193-6E01-404C-B228-A346CCB92C32}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\solar 2\solar2.exe |
"{A0EBEE35-4574-41CD-B022-D12E9BDB3AFD}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\magicka\magicka.exe |
"{A17BBCEE-7147-4D0C-94E5-E70CB33FAA8F}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\pid\pid.exe |
"{A1A0555C-6B5E-44BD-9915-5CB3DE739DD5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\stalker shadow of chernobyl\bin\xr_3da.exe |
"{A1B39DB1-45BD-49A0-90F5-34CF19DB6838}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{A1B98532-D2B8-443B-929F-2596C469B25C}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{A1E307C1-3F9E-4670-A4B1-FB80CD51FA6F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{A30A3BC5-2E92-4A5B-A60B-F938500DD84A}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\simcity 4 deluxe\apps\simcity 4.exe |
"{A34D6934-E070-4580-8BF5-D09B3ED7F24A}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{A37E0E8F-9F48-4978-911F-9CAB166917D3}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{A3E77005-3AA8-4724-9ACF-1BCE75D03432}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{A408B579-594C-4F93-8DBD-EFCE6BB2FF87}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\awesomenauts\awesomenautslauncher.exe |
"{A4A293C8-E509-4433-9476-2974F8441258}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\shadowgrounds\shadowgroundseditor.exe |
"{A4EE6E4A-D4F4-4203-BD2D-6AFD12885C6F}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\happy song prototype\afmana.exe |
"{A533E0E7-2D72-4A43-BB52-283209914FE1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{A55D61F4-5182-4A77-9477-F8DEE80C872E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\intrusion 2\intrusion2.exe |
"{A566426A-3F92-4569-A0B0-593288A173D7}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\gatling gears\gatlinggears.exe |
"{A5E84989-4BE8-4F82-8A45-DA30FC43AC0D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{A613CDDC-F7D3-40DB-B275-6CA234407907}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto\wino\grand theft auto.exe |
"{A62E773B-9E96-4BE0-8C43-281BC394541D}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\serioussam.exe |
"{A6328B5E-AB75-411D-B3A3-FD6F488FF57B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\warframe\tools\launcher.exe |
"{A65AA86C-9295-47EA-B0D0-DB795C83D2BC}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{A68840D2-75B3-4A4B-A9A9-23460E8F7B16}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shadowgrounds survivor\survivor.exe |
"{A6F5BB9C-817E-43EB-8E55-2DD21EA606AC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\nightsky\nightsky.exe |
"{A70D9C3E-7AD0-49FF-9E84-0B2E3785E2AD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sniper elite v2\bin\sniperelitev2.exe |
"{A7628254-9BD8-46F3-90DC-043F86E0293D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\overlord ii\overlord2.exe |
"{A78286B2-1C6A-4C69-9448-4E7244AAD0A4}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{A7867F28-739D-40D3-8598-AF4F93270706}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |
"{A7C4FA35-1987-42DE-91AE-4FFBE3B1E1B8}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords_pitboss.exe |
"{A7F3D191-5E08-42AA-8CA0-7D86BCB96F1A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bit.trip beat\beat.exe |
"{A81200D9-A4AB-4258-B213-2214E059483B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\rhythm zone\rhythmzone.exe |
"{A81212FC-54A9-4E2B-B452-971F2B215162}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\nightsky\nightsky.exe |
"{A84D36C0-B594-4354-8612-959A2D162A8D}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\portal 2\portal2.exe |
"{A8C70F47-FC87-4110-90E9-F7B122146E32}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\crayon physics deluxe\launcher.exe |
"{A8EAE106-D7AE-4378-B53F-C7382298915A}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0.10192-to-3.2.0.10314-enus-downloader.exe |
"{A908923E-BF84-49AE-9544-D6835B27AAD2}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the witcher enhanced edition\system\djinni!.exe |
"{A93AF337-A174-457E-B335-CCA501EA42A7}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\spore\sporebinep1\sporeapp.exe |
"{A9624529-13E8-4FF0-B4FF-873711AB14CF}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\penny arcade adventures on the rain-slick precipice of darkness episode 2\rainslickep2.exe |
"{A9745BF7-C427-4247-A71B-04554B70956E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\vvvvvv\vvvvvv.exe |
"{A9F412A3-E71E-4C5E-9926-42B89BD01BD8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\borderlands 2\binaries\win32\borderlands2.exe |
"{AA1F3ED4-E5FF-4037-9BD2-7AB540B0E348}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{AA6E70A5-E99F-4F4D-9CA3-89E9847D0EB4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{AAB567B4-0752-4D9E-88B4-0641CB1C4B1F}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{AB030B96-22EF-4ED0-BF54-7E3430851739}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\tropico 3\tropico3.exe |
"{AB9765F0-BD47-47CF-92F6-E2C9FF3B522B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\company of heroes\reliccoh.exe |
"{AC2FB6C0-6561-4EF3-8BB4-1EC16FB8A549}" = protocol=17 | dir=in | app=c:\users\attila\desktop\qq games\qqgames.exe |
"{AC62817B-BA61-4B32-8F4A-7077F4EB763F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{AC70289C-22DB-458D-94E8-1DB879B26C9B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\pid\pid.exe |
"{ACE27EF8-BB50-4D70-9FB3-B8C4427E141A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto 3\gta3.exe |
"{AD10377D-1FEB-4698-9C81-89DD6ED96E9D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\costume quest prototype\afcq.exe |
"{AD52CBEC-78CF-4E49-B62F-C6973385EA09}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{AD5AE6A3-AD35-4E4F-8637-00969B6AC96C}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\penumbra black plague\redist\penumbra.exe |
"{ADCA2EAF-21D1-46AD-BA95-DC5859B7E6FD}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\castlecrashers\castle.exe |
"{AE59ADAC-9BF8-4503-B259-CC90F3408C7E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\overlord\overlord.exe |
"{AE847E0C-2F48-43BF-B59D-758928446424}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\half-life\hl.exe |
"{AED0F9E9-7CD9-4E74-831A-97179B1FE5F3}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\bit.trip runner\runner.exe |
"{AF0EC342-C2EA-45B9-B8B4-E588AF6818A0}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\happy song prototype\afmana.exe |
"{AF7D0E12-A5CB-4060-8952-2B607FAEEC50}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\universe sandbox\universe sandbox.exe |
"{AFB27972-0EA4-4A25-BB35-64B67E30EC83}" = protocol=6 | dir=in | app=c:\program files\electronic arts\battleforge\bootstrapper.exe |
"{AFDA1760-510C-482C-8565-AD83B46E6CDB}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{B06DCEFB-C4EE-42D9-9547-202B270DAB78}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\aceofspades\aos.exe |
"{B0C00001-3D9F-4CFD-9723-6ECA8D4B7E91}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dear esther\dearesther.exe |
"{B0C4887F-D2C1-4A07-9F8E-14944A25B8C0}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\hoard\win32\reuben.exe |
"{B0C526D0-AC6C-47A4-8061-E8381D35B7E2}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\zenoclash\zenoclash.exe |
"{B0E5D005-86C5-4969-99EC-17555AFD24FD}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\grand theft auto 2\gta2.exe |
"{B122D836-783F-447B-9809-4B8A43838E15}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the walking dead\walkingdead101.exe |
"{B156611E-8E9D-491E-8564-FB392F6E6226}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{B18CE381-89C9-42F8-960F-D7570CA263CA}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\amnesia the dark descent\launcher.exe |
"{B2100DB2-AC46-4F7D-BC67-3B845093FF34}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{B23371A1-82CF-4418-8BB1-417C81E0434C}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fear.exe |
"{B2ED908D-FCA5-4BDF-87BA-839092C513F1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp_dx11.exe |
"{B2FD1E3D-087A-4D11-A983-F71F44499971}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\edge\edge.exe |
"{B33F965C-056F-4996-A968-67F3E9D486A6}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\medal of honor\mp\mohmpgame.exe |
"{B35BD782-A894-4CDC-88CE-7859074D88BF}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{B35FC365-3639-4F75-8AB0-8819DC9FDDF9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\back to the future ep 2\backtothefuture102.exe |
"{B393D865-0439-430B-B727-F53AEB740F95}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\spacechem\spacechem.exe |
"{B3BDDE81-FC00-4003-ADBE-487208B6FAA9}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\overlord\overlord.exe |
"{B403940A-AB48-4F28-97E5-75D7FAEF737B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fable 3\fablelauncher.exe |
"{B40C84A1-7A7B-434F-897D-11A269CC2FF1}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\on the rain-slick precipice of darkness - episode one\rainslickep1.exe |
"{B443F0C8-BFF9-4624-82DB-4CBDC73BADAE}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\back to the future ep 2\backtothefuture102.exe |
"{B462BBFE-ECF5-447E-8546-47AC9E32CBC7}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\cave story+\cavestory+.exe |
"{B478EAFB-D9A8-4A16-A2D9-F5B6EEA653F0}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp_launcher.exe |
"{B4960C34-9C58-411E-8CC6-EC59E474794F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\blocks that matter\btm_launcher_win.exe |
"{B4D11E81-9264-4EBD-A28A-D0F22531ABC5}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\simcity 4 deluxe\support\ea help\electronic_arts_technical_support.htm |
"{B4E2E232-2AEA-4F45-9975-5D688A2B2093}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\oil rush\launcher_steam.bat |
"{B5094BCD-DC0B-42F6-8C20-2F7D54990BA3}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\english country tune\english country tune.exe |
"{B55E4A91-D284-4090-88AE-3A2CB92DE0B3}" = protocol=17 | dir=in | app=c:\program files\electronic arts\battleforge\bootstrapper.exe |
"{B587E519-A054-4CA8-B62B-AF586DF77C65}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\majesty 2\majesty2.exe |
"{B5A3F8B1-F1ED-4D9C-B57D-B918E6982478}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\redfactionarmageddon.exe |
"{B5F95791-1023-4622-AA60-A30AB15F7641}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\spacebase df-9 prototype\win\bin\moai-fmod-designer.exe |
"{B6524837-83F0-47E3-A626-E7C93FCFDFE7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\autonomous prototype\launcher.exe |
"{B674E8D5-C382-4893-9209-563B5ED4D2C0}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\company of heroes\reliccoh.exe |
"{B6AC31DE-C922-4064-A3F9-AE4CD6D85251}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\tinyandbig\tinyandbig.exe |
"{B6BE983C-3B88-4A9A-B42A-E544CA002322}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\recettear\custom.exe |
"{B72EA9F6-93CC-40E6-8896-64F9966DA5ED}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{B73C5482-4F2A-4EC2-B39A-B269D30F3062}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dungeon hearts\dungeonhearts.exe |
"{B78BFB61-7FC1-473D-8C75-10B88CFE66C3}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\on the rain-slick precipice of darkness - episode one\rainslickep1.exe |
"{B7A87C44-2182-4EEF-858A-C9A2F7881892}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\nightsky\nightsky.exe |
"{B7DD674F-99A6-4BEE-B5E2-DF0349FF3108}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\spacebase df-9 prototype\win\bin\moai-fmod-designer.exe |
"{B88EE738-E397-4972-9B6F-6A1C8AB89568}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\darwinia\darwinia.exe |
"{B8A52DF5-59BB-4BAB-9DDA-659BF2437A40}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\burnoutparadise.exe |
"{B8AF90F7-9CB5-4DCF-8F0C-D1409BB233B8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\psychonauts\psychonauts.exe |
"{B8B23952-CA3A-4BC9-B2A5-CBF191502368}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\metaldrift\metaldrift.exe |
"{B8D6E782-05AC-4CBD-9C5F-DE183DA45A59}" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{B94E4CB0-F1B0-4DF6-8F77-F350C81AC425}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\alien swarm\srcds.exe |
"{B9937B6C-6F5C-4DE4-8E24-0F7E490FCD1F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\spore\sporebinep1\sporeapp.exe |
"{BA511757-E7EC-4D8F-ADF0-FEA4126CECF2}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{BA5377E3-8BF9-4D9B-ACF9-F2050509AB4F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{BAF20C96-1A49-4395-9ADE-7A0C4C098684}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\gatling gears\gatlinggears.exe |
"{BB0EA102-A579-42EB-9292-3E030207DEC3}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\saints row the third\saintsrowthethird.exe |
"{BB3B1091-FDEE-4A71-8D57-0A7470717B8F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\spore\runme.exe |
"{BB94DE63-52FB-4509-9073-535620F03F88}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{BBB52EE2-BD4C-4BAD-AE91-931D711411C3}" = protocol=17 | dir=in | app=f:\steam\steamapps\just2damndgood\arcadia\act.exe |
"{BC2917B9-C208-4078-BD01-C1C4702375FE}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\psychonauts\psychonauts.exe |
"{BCB9C8C3-4FAD-43FF-818B-E75ED9D95BCB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\recettear\custom.exe |
"{BCC8B5C4-C970-40D4-A919-DD7F083625F2}" = protocol=17 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{BD1869FD-8FFE-4E06-B851-894631F3D9E5}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{BD3134E8-C0BD-4A10-A444-DC48F2851234}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{BD729DFD-64D7-42B3-87C7-A842B58C3B17}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\rhythm zone\rhythmzone.exe |
"{BDF27421-A887-4F69-A909-89F5A2055B6E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sleepingdogs\hkship.exe |
"{BE1EF7F6-CFB7-4F2D-A851-2FA13FC7ECBF}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the walking dead\walkingdead101.exe |
"{BE53C157-743E-49DE-9790-A0F520DFE1C6}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords.exe |
"{BE65BE0D-F97B-4E00-80ED-2B6F60BBF77E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\realm of the mad god\realm of the mad god.exe |
"{BE8E67B0-A0ED-4745-B19A-1B87172077F9}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{BE9899A3-D3DE-4BFD-AB0F-01E1B17AC9D0}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the binding of isaac\isaac.exe |
"{BEA47AEC-FF88-4A6F-95F8-F276A00C8CE6}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the wonderful end of the world\main.exe |
"{BEBE912A-EE98-4826-AE0F-E83DC1294795}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{BEDCACDC-3CA1-4221-82E9-35E807ED3719}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\borderlands\binaries\borderlands.exe |
"{BF06C2C4-B311-481F-B996-2F859AC5623D}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\darksiders\darksiderspc.exe |
"{BF06CA0E-F0C1-4BC7-8F6B-944DB1A08A74}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{BF4AAE3E-449E-4952-B17E-4D0E159C85D4}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\simcity 4 deluxe\apps\simcity 4.exe |
"{BF5010A7-019E-4DE2-90DB-B929B6FCBBF6}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\remember me\binaries\win32\rememberme.exe |
"{BFA5967C-C4F7-4349-B77A-F5C2F1B2B83E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{BFBF3C0D-FDFF-48D4-BE7B-4E39F017201E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{C0009ED6-177A-4069-BF1F-E5E2260DA3A2}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\uplink\uplink.exe |
"{C0451277-D944-4208-9E43-7BCA3A9D3F47}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\titan quest\titan quest.exe |
"{C0879DD1-4026-4787-884C-B20D2A1857B6}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{C09E4FA1-8C8F-4202-BE97-3367CA1E3DFA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dreddvsdeath\dredd.exe |
"{C09F159A-7832-431E-8E0F-B6216F35F2E4}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\aquaria\aquaria.exe |
"{C10870CF-BF10-446F-8666-83BBE73DB4E0}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\grand theft auto 3\gta3.exe |
"{C154D51C-8C18-4574-951D-B55940C9517D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\titan quest\titan quest.exe |
"{C1CCDDAC-EC98-4EF8-B922-73879DCFA0D9}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\deus ex - human revolution\dxhr.exe |
"{C1D39525-96E4-4E70-A9C6-AB78F1C31558}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\bastion\bastion.exe |
"{C21D1CA6-C519-48E0-84F2-976B22161653}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sid meier's civilization iv\civilization4.exe |
"{C23CBBFD-1A94-4090-AD49-449739B954F9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\hotline_miami\hotlinemiami.exe |
"{C2593760-6FAB-441D-BC35-FC284E7C529B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shadowgrounds survivor\shadowgrounds survivor launcher.exe |
"{C27CCC3D-6C62-468D-B795-D599B41812A3}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bit.trip void\bit.trip void.exe |
"{C2BFA6FA-9B7D-4C15-A36F-4CAC78DD9244}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{C2FB7FCC-8853-4927-ADE8-8A089572F134}" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\garrysmod\hl2.exe |
"{C320A478-4F25-4FBE-9A7F-013828A4753B}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\beat hazard\runme.exe |
"{C33F5BCA-9F02-4A9E-A70F-BE1BFE336BD8}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bastion\bastion.exe |
"{C358E8FD-2287-4851-B04F-BC4A638AE61F}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto 3\gta3.exe |
"{C37E10D7-5101-4BA2-940E-8E110DAF15AF}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dynamite jack\dynamite jack.exe |
"{C3855778-8ECB-438F-BF28-03BEB3AFB139}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\killingfloor\system\killingfloor.exe |
"{C38BD01B-6A33-42A1-863C-2EEB47C94BDE}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\shank\bin\shank.exe |
"{C3C6E635-B02A-45A8-9353-47969F7B99E1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\planetside 2\launchpad.exe |
"{C40E74B9-70BD-4224-8CCC-B07CF936E34E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\crysis warhead\bin32\crysis.exe |
"{C42F0C74-7D69-477B-B125-B18869827B05}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{C43D8CEB-215A-4B66-B560-DECDAF7929AB}" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\garrysmod\hl2.exe |
"{C471EE82-CB51-4B7F-8CAE-A2BEB9757837}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sonic & all-stars racing transformed\launcher.exe |
"{C4AF02A6-0042-4857-BC23-1F9889227627}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\simcity 4 deluxe\apps\simcity 4.exe |
"{C4B1C8B9-74F5-4719-BC80-5146FC4C810E}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\alice madness returns\binaries\win32\alicemadnessreturns.exe |
"{C4C92927-06F7-44E9-B2ED-DB763A640EC3}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\vvvvvv\vvvvvv.exe |
"{C5002F81-05AC-4606-9A7E-723FE91D442A}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\autonomous prototype\launcher.exe |
"{C550C18B-C80F-45A5-81EE-EC7B96227143}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bit.trip runner\runner.exe |
"{C55C57E2-B363-4061-A245-25DD3F2406ED}" = protocol=17 | dir=in | app=c:\program files\aim6\aim6.exe |
"{C5F76323-459A-4672-8718-A0B74A9C6BEC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\and yet it moves\and yet it moves.exe |
"{C60A0FDC-9239-453D-B247-CCCCBB05E4A0}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\overlord ii\overlord2.exe |
"{C697F14D-952C-4710-A06C-DFC61A7C504A}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\vampire the masquerade - bloodlines\vampire.exe |
"{C6F81CBC-517B-4311-A8A5-3E88CC13AEA9}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{C770F1D3-6F39-4494-B739-7D9AA20C18D9}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\bit.trip core\bit.trip core.exe |
"{C7A827C5-62CA-4B88-B3A4-AA9A8710AFF2}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\nmrih\sdk\hl2.exe |
"{C7D89C85-A3CC-4807-A229-99312C158558}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{C81577CB-B13A-4C8B-BF37-F4D35E2F31C4}" = protocol=17 | dir=in | app=c:\program files\battlelog web plugins\sonar\0.70.4\sonarhost.exe |
"{C8326808-0850-49EA-92D8-6AFE494A9CE5}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dead space\support\ea help\electronic_arts_technical_support.htm |
"{C882F332-308C-4B84-8789-3498F610C477}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\fear2\fear2.exe |
"{C952DA76-86A2-4992-A32E-863A847F7250}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\overlord\config.exe |
"{C959EF2A-6B63-4FB4-8C46-5040249097F9}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\poker night at the inventory\celebritypoker.exe |
"{C97BADB2-7324-4888-A38E-404266F5C0C6}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\trine\trine_launcher.exe |
"{C9963733-F155-402C-B657-644BB21839E4}" = protocol=6 | dir=in | app=c:\users\attila\desktop\qq games\qqgames.exe |
"{C9B7A11D-1F7F-4388-8B82-C14C7B4700D8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aliens vs predator\avp.exe |
"{C9FBC992-B480-4D14-9D8D-136CC77AF582}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\reus\reus.exe |
"{CA99D8E8-A0B8-4224-8D27-B52680FD66E3}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\cogs\cogs.exe |
"{CB176F27-87AF-4559-8701-3334D4930739}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\atomzombiesmasher\data\atomzombiesmasher.exe |
"{CB7753E0-6496-4FCA-9686-D5FB087EE2A9}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\quantum conundrum\binaries\win32\trygame-win32-shipping.exe |
"{CB7D5452-7A2A-41FF-A298-38D8372D06FB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\brutallegend\brutallegend.exe |
"{CBD924A8-1D6D-4734-933C-69E117AEF1EC}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\saints row the third\game_launcher.exe |
"{CC1356E6-3644-4A6F-B7AC-F5548602AA51}" = protocol=6 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{CC3F43A4-2E25-4532-ACE4-6D9F33848FA7}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\oil rush\launcher_steam.bat |
"{CC6F8FB2-F7C1-4E99-9FB7-6C02B1CAB34E}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dust an elysian tail\dustaet.exe |
"{CCB00DE2-8525-4FAC-BA11-07B50BDBF3A3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bit.trip fate\bit.trip fate.exe |
"{CCB8E3DA-DF2E-4EE3-808D-05F8C6BDF901}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{CCEE7BC9-452F-4A3F-8D0D-A381732CD1D1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\team fortress 2\hl2.exe |
"{CD29711E-B680-44C0-B934-82D54DE631B8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\spore\runme.exe |
"{CD4D0EAB-78F0-4C20-A5FA-C1E1AFC71759}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\crysis 2 - demo\bin32\crysis2demo.exe |
"{CD7D9AD6-8837-40CB-8A60-CFCA41F209BD}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\thepolynomial\polynomial.exe |
"{CD82E358-7E4E-4910-83FF-627DE46BE6EF}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{CDA031F0-A81C-4B99-9413-9FA77110A38F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\little inferno beta\little inferno.exe |
"{CDB37C7C-3C47-46E7-8CE3-EF8B7A25CD55}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\nightsky\nightsky.exe |
"{CDF576ED-F586-4628-AF7D-0CBC71EAA702}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{CE43EF0A-FF13-4BE7-A88F-FA6B39C49BD4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{CE45BEB2-7A9E-48E7-8AB8-CBF9CC6D74EA}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{CE84F3E9-329A-4C71-8F39-267282D0E5A0}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{CE951884-22FA-4D0C-8153-8EE1C1408695}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\penny arcade adventures on the rain-slick precipice of darkness episode 2\rainslickep2.exe |
"{CEF958A5-634D-4868-A1F4-210D45BCDFE4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\the white birch prototype\birch.exe |
"{CF1FE448-C7E3-4CE9-8F32-C6C88054F956}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bioshock infinite\binaries\win32\benchmark.bat |
"{CF6921DE-B90A-448D-A4C8-C4F5577C885A}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\team fortress 2\hl2.exe |
"{CF9A9296-9ED8-47D1-B38A-D89C847DDFBE}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dynamite jack\dynamite jack.exe |
"{CF9E5DAB-3118-4924-A889-727945E19B2D}" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{D0198319-B41B-451C-8B34-F3BCE7D93379}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\skyrim\skyrimlauncher.exe |
"{D0343475-DA57-42C2-817A-F59D7E7044C4}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\alien swarm\srcds.exe |
"{D0924B51-9B39-42DB-A169-5214749B605F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dead space\dead space.exe |
"{D0C08DF1-E765-402A-B310-E3DC424848B5}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\costume quest\cq.exe |
"{D165DE16-FF5E-47FA-9A95-47C3C4824DBA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dungeon hearts\dungeonhearts.exe |
"{D18B62DF-EAB5-4E0C-992B-5842E236EB8A}" = protocol=6 | dir=in | app=c:\program files\electronic arts\battleforge\battleforge.exe |
"{D18D5E60-40D1-433E-9BD0-9FBA78F5E55D}" = protocol=6 | dir=in | app=c:\program files\jawbone\jawboneupdater.exe |
"{D1BA9D24-FE61-4BC3-A4B3-F10BCEF33E14}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\brazen\brazen.exe |
"{D1BB82C8-79FF-4810-BF4C-AD3C11AE8B65}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bioshock infinite\binaries\win32\bioshockinfinite.exe |
"{D1BD9913-27BB-443F-97F6-5310C860A92D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\nightsky\nightsky.exe |
"{D1F2DB0E-CC1E-41AE-9DF1-AEA70740B715}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{D203779F-E482-4AA5-BAC7-0D27217A4600}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\alien swarm\swarm.exe |
"{D238F1D6-A36C-4B61-8519-1189892A88F6}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{D252DBF4-ED6C-449A-836C-DCE253CE4EBA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\half-life\hl.exe |
"{D259AC19-585A-408E-B404-5511BA9584CD}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\thepolynomial\polynomial.exe |
"{D32E1511-5C26-466E-AAF4-3F4E4B887C10}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords.exe |
"{D35F9EAE-6603-41E3-A4B1-0AAF67712A28}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam classic the first encounter\bin\seriouseditor.exe |
"{D3BA3CDC-8AE3-4009-9F72-E97E86DFEDF7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\tropico 3\tropico3.exe |
"{D3D9E4A6-449D-4E74-9ED7-BA2B0C374323}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\crysis\bin32\crysis.exe |
"{D49B81E6-D06D-4867-86F2-39DB80064B44}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\civilization iv colonization\colonization.exe |
"{D5120060-7F83-40CF-A8CC-FE63424DE19C}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\grand theft auto vice city\gta-vc.exe |
"{D58C7E7F-F8B0-40CA-ABC4-2C2510C77DC4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\serious sam hd the first encounter\bin\samhd_demo.exe |
"{D5B461CD-97FC-4B25-A458-D70220285050}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\borderlands 2\binaries\win32\launcher.exe |
"{D61020C8-984E-49F8-9657-72C091B23C53}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\team fortress 2\hl2.exe |
"{D6AE2EAC-0317-4597-942E-F05AAE9A9323}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\recettear\recettear.exe |
"{D6C43097-84C6-419B-8A75-0F29C4CC48B1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\valvetestapp207490\rayman origins.exe |
"{D71F2C46-689B-4D08-A885-4D96CD37CFD7}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\bit.trip beat\beat.exe |
"{D7365640-3DE1-4968-AD6B-6519ACEB012D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\penumbra black plague\redist\penumbra.exe |
"{D7531DA8-D58D-4404-BE3A-A7AB733AB1DF}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{D7562844-291C-4C21-BF4A-4F1B15FAF3B1}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\pinball fx2\pinball fx2.exe |
"{D757A9EE-8CC2-4A87-AA52-029357CBC0EB}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\from dust\from_dust.exe |
"{D775BFEB-11C7-4801-AA06-CAF814E1CED3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\beat hazard\runme.exe |
"{D781D204-1B3D-458B-875B-FF1FA9E664DC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dota 2 beta\dota.exe |
"{D785510A-442F-4897-9458-BBAE3C5883CF}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\rf4_launcher.exe |
"{D7A62D10-535B-409B-AF14-71D372FBAC7D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\brink\brink.exe |
"{D7FB4908-1AA7-47DB-8829-A6336D559427}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\bit.trip beat\beat.exe |
"{D8048BF9-C2F3-4AD0-82A3-303D6355D8FA}" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\beat hazard\runme.exe |
"{D809B3B0-C534-4192-9833-D17D9D49380F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\ben there, dan that!\winsetup.exe |
"{D85B1F3B-08A4-49BA-8292-560546017CD8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dungeon defenders\binaries\win32\dungeondefenders.exe |
"{D88CCC1A-E77C-47AF-9B7D-BBDE81B63CE0}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\warframe\tools\launcher.exe |
"{D8ECA7F7-C914-4078-9A94-FD15C0E15ACA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\grand theft auto san andreas\gta-sa.exe |
"{D9978BED-2459-43BD-9B0C-BCDE023649EE}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien swarm\srcds.exe |
"{D9E289F4-6C4C-45A4-9BE9-B8E8A5E145E8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\psychonauts\psychonauts.exe |
"{D9F736DF-7971-4459-BD4B-1BFF1C5536DC}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the white birch prototype\birch.exe |
"{DA1C7F2A-26FF-436C-AFEA-875C60B6C52F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgrounds.exe |
"{DA756B3B-4FD0-4A06-BB4F-CF144050A918}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\serious sam 3\bin\sam3_unrestricted.exe |
"{DAC3DC1D-18CE-46C4-B234-94936F809294}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\back to the future 105\backtothefuture105.exe |
"{DACD24A2-301F-4A11-9EDF-07EED6A68311}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\crysis wars\bin32\crysis.exe |
"{DAD7BFD2-0993-4F6F-A0FA-AEEAADE05A1F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\castlecrashers\castle.exe |
"{DAEB1F43-A64E-4FAF-9DE2-3FE4C3D4FCC7}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\penumbra overture\redist\penumbra.exe |
"{DB4A685C-C475-425E-A2EA-984516B74829}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\ftl faster than light\ftlgame.exe |
"{DBC572F5-B95B-414D-951F-F7B1C9716B07}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\oil rush\launcher_steam.bat |
"{DC479A71-E05C-4855-A082-A23CB99BC88F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shadowgrounds\shadowgroundslauncher.exe |
"{DC61AF1D-38DD-4621-BBC0-515D244AA5E3}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\costume quest\cq.exe |
"{DCBA1755-5578-48F4-AA85-611D2E166F07}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\little inferno beta\little inferno.exe |
"{DCDF4F00-24A1-4C36-95CC-322A3A1A01FA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\gratuitous space battles\gsb.exe |
"{DDA3EB45-9F3C-48DE-9997-0B96C081D6F8}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{DDA7FC10-D14C-4C7F-BAD8-7799EDB2717D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\pinball fx2\pinball fx2.exe |
"{DDC904C8-501E-44E9-A515-199F9583E390}" = protocol=17 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{DE0BA58F-52BC-45E7-AE07-C7032CC8D67C}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\pid\pid.exe |
"{DE2F78C6-5F53-4B06-B8E8-97E206B4C1B1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\beat hazard\beathazard.exe |
"{DEDC6C96-069F-416B-8DAC-9A89BFF5C9C5}" = protocol=6 | dir=in | app=c:\users\attila\desktop\qq games\qqgamesd.exe |
"{DF04D23B-FE66-4363-BD1C-C5512499B320}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\saints row the third\saintsrowthethird_dx11.exe |
"{DF2408B6-7229-43C7-A3E3-3BD3A7B90E9E}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dungeons of dredmor\dungeons of dredmor.exe |
"{DF32388C-B1AC-40A1-B34D-5513FAD15CDE}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{DF8F1797-7A8F-4AE2-88DB-2FE07D8A9741}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\eufloria\eufloria.exe |
"{DFF0BDBF-47B1-470A-9BD5-95D54EC4FBC3}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\microsoft flight\flight.exe |
"{E0AC718A-2DF2-4213-B68B-3C39A4EC65D9}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\autonomous prototype\launcher.exe |
"{E12CC9E5-C50B-455A-BC96-ABC77CC0206B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the sims 3\game\bin\sims3launcher.exe |
"{E159540A-0E40-4A7D-8647-C7BB1464A5D1}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\hack n slash prototype\afhack.exe |
"{E1828BB7-72EF-4C7E-9558-04D393B2004B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\happy song prototype\afmana.exe |
"{E18B12A1-03D9-4159-AE6F-6742F78105D8}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\sid meier's civilization iv beyond the sword\beyond the sword\civ4beyondsword.exe |
"{E1D681AE-DACE-426F-8B20-9A3CAFE6BB3A}" = protocol=17 | dir=in | app=c:\program files\jawbone\jawboneupdater.exe |
"{E1F1B2FD-03A7-4460-ACE7-8B3309F58419}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\call of duty black ops ii\t6mp.exe |
"{E200A5FA-256D-4910-A916-E438D390E14A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\garrysmod\hl2.exe |
"{E20BE460-BBE1-4855-8E4A-8DA2EFF2CBEF}" = protocol=6 | dir=in | app=c:\program files\common files\aol\loader\aolload.exe |
"{E22669B7-CA7F-4069-BEBF-A1CFE519E4F5}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\seriousmodeler.exe |
"{E241B1A4-D26B-406E-9AFC-0CB35BABBA5B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\burnout™ paradise the ultimate box\support\ea help\electronic_arts_technical_support.htm |
"{E26712C9-C74B-4CB8-8E92-67E0D07A931D}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\shank\bin\shank.exe |
"{E26BED0A-C723-47A7-8E27-D804F3FE88C7}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\mass effect 2\masseffect2launcher.exe |
"{E2AC278C-3C3A-4344-858E-3BA1CB61E29B}" = protocol=6 | dir=in | app=c:\users\attila\desktop\qq games\update\update.exe |
"{E2DC79AD-D04F-49AF-AF3F-DD3E6D153732}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\bastion\bastion.exe |
"{E302DB58-F13C-4904-9476-2787791194DF}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\little inferno beta\little inferno.exe |
"{E3120BD6-BC5A-498B-AD7C-E61520713D8A}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\darkness ii\darknessii.exe |
"{E323BEF5-A65D-4992-BFA7-613C7DD78B6D}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstrb.exe |
"{E32A32EA-B736-499F-819C-B250FF67DCD9}" = protocol=17 | dir=in | app=c:\program files\pando networks\media booster\pmb.exe |
"{E34432E5-ED17-4DC3-B3F3-60479040A6D7}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam classic the second encounter\bin\serioussam.exe |
"{E37F0E2A-A14B-4C9C-A1FA-BDE75FE07951}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\frozen synapse\frozensynapse.exe |
"{E3977588-A9C6-42D6-8F47-7956038AEEE2}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{E3B4D85B-C7E2-494E-8F9B-3DABE654195B}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{E3BF4772-0E60-4AAE-B6E3-7BA92A5DA294}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\crysis warhead\bin32\crysis.exe |
"{E3F011F7-C5FD-45F4-82F2-E2A1B5FCE62E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\beat hazard\runme.exe |
"{E3F5DFB5-5B1D-4730-AD78-9253B59568C5}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\multiwinia\multiwinia.exe |
"{E43D4130-CE40-4965-B643-5CD3FE54F5AD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mirrors edge\binaries\mirrorsedge.exe |
"{E4A47441-FA20-43CA-A003-7C40659BDF8C}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\atomzombiesmasher\data\atomzombiesmasher.exe |
"{E5135504-80D8-41AA-9A6E-C619CF9F68FC}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\cogs\cogs.exe |
"{E56BBFFA-C047-49E8-BA6E-94163996586B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{E59A5786-3FC2-4F8C-90EE-D09AA615DED4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\simcity 4 deluxe\support\ea help\electronic_arts_technical_support.htm |
"{E5A3C74B-AE28-4F58-AE2C-6643D8C70444}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\the witcher enhanced edition\system\witcher.exe |
"{E6318A36-05A9-4E84-B76B-8183487974E0}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\the last remnant\binaries\tlr.exe |
"{E6515658-BD54-470D-B65E-1A09DA8C2673}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\poker night at the inventory\celebritypoker.exe |
"{E6549399-436F-4EC1-A815-5DA9F5176F1D}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aquaria\aquaria.exe |
"{E67B7D9C-5C06-4E58-AF6E-AA676BCD4E01}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\darksiders\darksiderspc.exe |
"{E68B936B-E43D-4CE1-9918-62DA2F18F628}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\beat hazard\beathazard.exe |
"{E6AB1646-DB90-41A0-8C03-FF3D8A0FC98B}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"{E729FB53-143F-4A31-AD3B-5ACBB728AB44}" = dir=in | app=c:\users\attila\documents\the war z\warz.exe |
"{E73BA3F2-69E3-4371-8B8A-063ED3EA60BD}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\audiosurf\engine\questviewer.exe |
"{E81A863F-49CD-49E0-8950-D7332317F63C}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\overlord\config.exe |
"{E82D3DF3-9B66-41DB-B1B8-D4C9639F39EF}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\eufloria\eufloria.exe |
"{E845BEF0-3CB8-43A3-B037-D384CF6E0714}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\beat hazard\runme.exe |
"{E860FB4F-1D6A-4713-9382-4E47C0BE59F6}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\the binding of isaac\isaac.exe |
"{E86522CE-F83C-4CDA-907C-E8C5BE0533F8}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\arma 2\arma2.exe |
"{E8BF6F24-CC05-4A62-8367-9D5BEE782638}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\bit.trip core\bit.trip core.exe |
"{E9FE75C2-4EC1-41A8-ADDE-B0B879613F6F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shank\bin\shank.exe |
"{EA57AA09-C49D-4DA5-AB7D-27F6D5C091A8}" = protocol=1 | dir=in | [email protected],-28543 |
"{EAD374C5-B3AF-42C3-A62E-5A7450394458}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\serious sam 3\bin\sam3_unrestricted.exe |
"{EAD6CDA7-D259-4A1E-8932-2191E3186226}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\serious sam classic the second encounter\bin\seriouseditor.exe |
"{EB04F0D5-F89F-4529-8ED8-29BFC2F0657D}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\poker night 2\pokernight2.exe |
"{EB05B725-49F6-488F-B263-9F1E317E0D68}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\sonic & all-stars racing transformed\asn_app_pcdx9_final.exe |
"{EB0C822E-60F2-4660-8128-8E1E8EE5CB82}" = protocol=58 | dir=out | [email protected],-28546 |
"{EB4EBD94-39DB-456D-B5D8-4AF584010460}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1675\agent.exe |
"{EB68CDE5-3B4F-4C66-9EE3-936839A79851}" = protocol=6 | dir=in | app=g:\steam\steam.exe |
"{EBA8A84C-3F4D-462B-802C-309F95D53599}" = dir=in | app=c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe |
"{EBB30D25-849A-4539-88FE-0102190C8C7F}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\alien breed impact\binaries\alienbreed-impact.exe |
"{EBBE87B9-D62C-4A2A-AD4F-A185539163DC}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\just cause 2\justcause2.exe |
"{EBD67986-0A00-4A70-A643-847FE80BA0A8}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\fallout 3\falloutlauncher.exe |
"{EC5545E4-B749-4230-8537-AC768F2D0B20}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\ben there, dan that!\btdt.exe |
"{EC81360F-F770-4082-ADAD-3903A8A05F61}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\overlord\config.exe |
"{ECE448C3-3A41-48CC-84EB-FB3B0EFF0B7A}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dynamite jack\dynamite jack.exe |
"{ED22AD85-E972-4D97-838D-1F125B241AA1}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{ED5F8C1B-D4EF-49B4-8F8B-C4A807D69A12}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\serious sam 3\bin\sam3.exe |
"{ED796D2B-6DC8-461A-8E50-7BDB0DD01C12}" = protocol=17 | dir=in | app=f:\steam folder\steam.exe |
"{EE9A8B07-4327-4C90-A223-5F14094081A1}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\dead rising 2\deadrising2.exe |
"{EEE63033-95C4-49E8-9B1F-54B799AD67FD}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{EEF21769-7E9A-4CEB-B742-CFE6902EF2FA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dead space\dead space.exe |
"{EF3DB02B-B585-427C-9850-8C607A48F5DE}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\saints row the third\game_launcher.exe |
"{EFD69013-0DAC-4E46-8E09-4266FCD17EDB}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\back to the future ep 2\backtothefuture102.exe |
"{EFE94CBE-5F05-46A8-BA9F-A2790F10FF2F}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\steelstorm\steelstorm.exe |
"{EFF25422-B756-46C1-B09F-C1CF07225322}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\grand theft auto\wino\grand theft auto.exe |
"{EFFCF62C-F053-4BB1-A161-8D861864E24E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\costume quest\cq.exe |
"{F0384FEB-E3CB-4CCF-8665-4892E7BFB99F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\dead rising 2\deadrising2.exe |
"{F0E87A82-4DE7-4D0C-95C8-1C7B99E57A2B}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\company of heroes relaunch\reliccoh.exe |
"{F13D2D78-18AC-4126-A907-5B8DDB3EBBB1}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\crysis warhead\bin32\crysis.exe |
"{F1488EE5-6AD4-4E5D-A8BC-DA259DC15A0A}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\solar 2\solar2.exe |
"{F14CCEA2-A62F-47E9-A941-3561E1286C99}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\crysis 2 game of the year\bin32\crysis2launcher.exe |
"{F1551CFE-D9AA-4518-B0C1-FDA81A98D4CF}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fallout 3\falloutlauncher.exe |
"{F1ABF094-2EA4-44B3-8B80-4C11B43CBC72}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\pid\pid.exe |
"{F1C9D2E5-9F91-47AB-AFCC-B97B1D57CBAC}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\black lake prototype\black.exe |
"{F1D1A87E-9573-4947-B671-FC603AC62190}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\time gentlemen, please!\winsetup.exe |
"{F1E11549-4C5F-47E6-ADDB-77943B5C0CCE}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{F1E5A63E-B0F0-4151-9250-DACA31018BA3}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\overlord ii\overlord2.exe |
"{F25A32DA-FE1F-4226-9457-E45E8C5DE20A}" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\batman arkham asylum goty\binaries\bmlauncher.exe |
"{F26F5D13-2C1C-4F49-BB1A-A33CC73B70D4}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\bit.trip beat\beat.exe |
"{F2741119-18E9-48A9-9665-3E0FFF76B6B8}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\super hexagon\superhexagon.exe |
"{F2AE1178-41F4-4211-8C55-D6FD528277D1}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\cave story+\cavestory+.exe |
"{F2AE728F-F568-41A4-B904-D0A5289F5A3F}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\multiwinia\multiwinia.exe |
"{F2FD3043-FC4F-4C1F-8311-5B1A6EFF3B57}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\serious sam hd the second encounter\bin\samhd_tse.exe |
"{F301C88F-3321-4CDD-9025-FCB27EC0E967}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\black lake prototype\black.exe |
"{F37C2E60-FE62-489D-9668-F50F380D74FD}" = protocol=6 | dir=in | app=c:\program files\origin games\battlefield 4 beta\bf4.exe |
"{F3DBF4E2-7EE9-47DC-96A1-161ED91FF76C}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dead island\deadislandgame.exe |
"{F3DD726D-72C6-466D-A322-2E44F283D7E9}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\sniper ghost warrior\sniper_x86.exe |
"{F428B613-B692-4B94-BFA9-69CCB3E6BE32}" = protocol=17 | dir=in | app=c:\windows\system32\pnkbstra.exe |
"{F441B906-704F-4245-92AE-3A3983F14B97}" = protocol=6 | dir=in | app=c:\program files\ventrilo\ventrilo.exe |
"{F4825B84-5799-48B3-BBFC-BEEC73A84E63}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\aceofspades\aos.exe |
"{F4A8456C-9E40-45E2-BB89-C8D9772FD7F6}" = protocol=17 | dir=in | app=c:\users\public\documents\blizzard entertainment\world of warcraft\wow-3.2.0-enus-downloader.exe |
"{F4B13BD1-C48E-4487-9055-0DDA1C008FFD}" = dir=in | app=c:\program files\zecter\zumocast\bin\gst-thumbnailer.exe |
"{F4BD704E-7B69-4DAF-8E57-8C350B2ACC6E}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\steelstorm\steelstorm-dedicated.exe |
"{F4D1D2A4-3204-4BCF-A7AB-B5E70EC656FB}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\portal 2\portal2.exe |
"{F4FF407E-C8E1-43DC-BCF8-59FA50CD1562}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\trine\trine_launcher.exe |
"{F501969E-C5C1-4A11-BD67-001D6140A98F}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\psychonauts\psychonauts.exe |
"{F5536E9B-227B-4FF2-9F71-36D0CB80FEB3}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\dont_starve\bin\dontstarve_steam.exe |
"{F5677F7A-0843-4AB5-BB50-790A62BF0762}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\capsized\capsized.exe |
"{F5C7A45C-67A0-4A32-9F45-A3BAE537817C}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\overlord\config.exe |
"{F675C2C3-51A1-442D-82D0-FA19C05C21B2}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\overlord ii\overlord2.exe |
"{F75285ED-6149-4B1A-9EEA-BA2B6A5C4BFA}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\mass effect 2\binaries\masseffect2.exe |
"{F75EF8FB-C847-431E-AC42-C8DACD1622CB}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fear.exe |
"{F7695B76-03AF-49C1-9E91-8658E69768EB}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\quantum conundrum\binaries\win32\trygame-win32-shipping.exe |
"{F7770B7E-721A-4EEC-BD51-B900281EEB8F}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\capsized\capsized.exe |
"{F77C19BB-6865-47D6-9FAD-6AC72326ACCD}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{F7D804B6-F1FB-4815-9446-DB06D19ED021}" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\spore\support\ea help\electronic_arts_technical_support.htm |
"{F81A8BC3-E8CF-479B-8089-A2FAF28856B1}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\red faction armageddon\redfactionarmageddon_dx11.exe |
"{F834C409-31C5-4F03-B621-7E82EC5F362E}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\sid meier's civilization iv warlords\warlords\civ4warlords.exe |
"{F84CB130-8FD5-464E-B09B-1A9D1E4E6AAB}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\hack n slash prototype\afhack.exe |
"{F877C6A4-21AD-4C31-9588-F773AAA11140}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\shadowgrounds survivor\shadowgrounds survivor launcher.exe |
"{F8B06748-9AED-49FB-A2B2-6C054A78B6F0}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\bully scholarship edition\bully.exe |
"{F8C02E2D-9889-4703-B68F-0D05226E7E0D}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\the sims 3\support\ea help\electronic_arts_technical_support.htm |
"{F8DB962B-0C1D-4A68-86A0-633CAED08D18}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{F8DE1830-67FA-404C-A22F-7FF516343CA8}" = protocol=6 | dir=in | app=g:\steam\steamapps\common\alien swarm\swarm.exe |
"{F9134484-A2C5-4588-A000-3AEDBF47CA1E}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\bit.trip core\bit.trip core.exe |
"{F92D5FC5-B67C-4DDB-919A-B00CF12D2DE1}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\vampire the masquerade - bloodlines\vampire.exe |
"{F9D59460-12CB-4420-BAC6-BAA50B73804C}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\thomaswasalone\thomaswasalone.exe |
"{FA58506C-5494-4B2B-BD76-6C44C9C13837}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\crysis\bin32\crysis.exe |
"{FAABCB73-9E87-41AB-8229-A1EF3960397B}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\orcs must die!\build\release\orcsmustdie.exe |
"{FAB2E8AC-058A-43F7-8199-CD763DD5D8F3}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\steelstorm\netradiant_win32\radiant.exe |
"{FABF43F1-2A75-47D9-B827-D7E05BD60797}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\shattered_horizon\client_exe\shattered_horizon.exe |
"{FAC83F7B-BEA6-4E48-8943-FF3871817178}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dust an elysian tail\dustaet.exe |
"{FAF6246E-AA62-47FE-8428-B747710BC1BA}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\mass effect\docs\ea help\electronic_arts_technical_support.htm |
"{FB4457AD-CA0D-42FF-8E50-0B394F82F838}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\payday 2\payday2_win32_release.exe |
"{FBB960E4-E70C-4AB6-A54F-9E2809F62BE0}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\spiral knights\java_vm\bin\javaw.exe |
"{FBCEB303-68B8-4086-B6F6-B14CD5A6172D}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\audiosurf\engine\questviewer.exe |
"{FC0C3575-5C0C-49EB-A20C-D350EB3AAF72}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\time gentlemen, please!\tgp.exe |
"{FC10A30E-3D72-46CD-9546-015C8606F128}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\jamestown\jamestown.exe |
"{FC3C2D7C-7474-4CB9-ABC6-7C55FCAA192E}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\killingfloor\system\killingfloor.exe |
"{FC5F4960-917F-418D-9DF6-752ED3324A0F}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\eufloria\eufloria.exe |
"{FCADF775-73D0-45DC-BA97-47CCCEB5D1E0}" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\day of defeat source\hl2.exe |
"{FD6F211F-BAF8-4A71-9BB5-875BA7602CA2}" = protocol=6 | dir=in | app=f:\steam\steamapps\common\fear ultimate shooter edition\fearxp2\fearxp2.exe |
"{FE13D5BC-D179-48F7-83D8-0432C6F5FD13}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\scribblenauts\scribble.exe |
"{FE219027-869A-4EC9-93E7-4B33AD58EFB0}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\limbo\limbo.exe |
"{FE26C410-087A-4A4E-BD19-36DA3D5B64E6}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\thepolynomial\polynomial.exe |
"{FEE77AC3-2B68-4822-8D97-21391254DE36}" = protocol=6 | dir=in | app=f:\steam folder\steamapps\common\sonic & all-stars racing transformed\asn_app_pcdx9_final.exe |
"{FF3BAA67-8AFB-49F2-B724-69BABDE947DB}" = protocol=17 | dir=in | app=f:\steam\steamapps\common\amd driver updater, vista and 7, 32 bit\setup.exe |
"{FFADF5C2-73CC-4FAD-B4F8-6B6C8B8074B1}" = protocol=17 | dir=in | app=f:\steam folder\steamapps\common\capsized\capsized.exe |
"{FFBAFA85-6314-4ED8-A5CA-29E2371C654A}" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\aliens vs predator\avp.exe |
"{FFD9769B-22FE-4B79-9EF3-7F4365F1DA37}" = protocol=17 | dir=in | app=g:\steam\steamapps\common\orcs must die 2\build\release\orcsmustdie2.exe |
"TCP Query User{08273235-0B23-4737-A71E-8BB84728C28E}C:\users\attila\appdata\local\temp\gw2.exe" = protocol=6 | dir=in | app=c:\users\attila\appdata\local\temp\gw2.exe |
"TCP Query User{0A19258E-5FD3-404C-A7BD-36D28E7D5A17}C:\program files\electronic arts\battlefield bad company 2\bfbc2game.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\battlefield bad company 2\bfbc2game.exe |
"TCP Query User{0AF57857-ED3D-468A-A557-69CD544CC3BF}C:\users\attila\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\attila\program files\dna\btdna.exe |
"TCP Query User{17F4F2C1-BCA6-4BF5-A722-6FDC368CEC1E}C:\program files\steam\steamapps\just2damndgood\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\just2damndgood\team fortress 2\hl2.exe |
"TCP Query User{36294D42-0F4C-481D-9468-6CD8CE9BB2A1}C:\program files\steam\steamapps\common\fallout 3\fallout3.exe" = protocol=6 | dir=in | app=c:\program files\steam\steamapps\common\fallout 3\fallout3.exe |
"TCP Query User{3874CA6E-F235-4662-A3ED-465496386F29}G:\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\common\planetside 2\planetside2.exe |
"TCP Query User{40C13FE5-1180-42F0-9A6A-087C4994A0FD}C:\program files\turbine\ddo unlimited\dndclient.exe" = protocol=6 | dir=in | app=c:\program files\turbine\ddo unlimited\dndclient.exe |
"TCP Query User{4EDF1A6E-B27A-4710-A7D0-BEFB0C5D391F}C:\program files\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\program files\guild wars 2\gw2.exe |
"TCP Query User{4FFF48E9-CD01-4D58-8358-C84C1FBE1D87}C:\users\public\games\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"TCP Query User{5334D6B6-BFE8-46F1-9CE4-86D002D422E0}D:6\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=6 | dir=in | app=d:6\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"TCP Query User{5C385689-A62E-4A40-830F-AC99CD58767A}G:\steam\steamapps\common\autonomous prototype\auto.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\common\autonomous prototype\auto.exe |
"TCP Query User{62EB6D5D-0997-4E1B-BD07-9A9EBCA1FF8C}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"TCP Query User{6DE848FD-6131-4ED3-A973-21480DE41D6E}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{738E4CF8-38D2-4D27-BD66-C6122D4ED799}C:\program files\starcraft ii\versions\base24944\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base24944\sc2.exe |
"TCP Query User{766E5FDF-9BEF-474D-80B4-B7FC34CF3C86}G:\steam\steamapps\just2damndgood\team fortress 2\hl2.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\just2damndgood\team fortress 2\hl2.exe |
"TCP Query User{95037B50-D61D-4A51-B238-15D5A67FF70C}C:\program files\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base15405\sc2.exe |
"TCP Query User{98B84DA3-5FD5-46D8-8E3B-E508A6C94F40}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=6 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"TCP Query User{9DACA06B-42AD-4CDC-936C-25D8FD94E1AD}C:\users\attila\appdata\local\warframe\downloaded\public\warframe.exe" = protocol=6 | dir=in | app=c:\users\attila\appdata\local\warframe\downloaded\public\warframe.exe |
"TCP Query User{9FB3C60C-5C06-4907-A382-BF4C2D8D18C1}G:\steam\steamapps\common\dead island\deadislandgame.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dead island\deadislandgame.exe |
"TCP Query User{A262658D-4E12-4C26-9182-3CF45E507EAF}C:\program files\starcraft ii\versions\base23260\sc2.exe" = protocol=6 | dir=in | app=c:\program files\starcraft ii\versions\base23260\sc2.exe |
"TCP Query User{CB5FB50F-084E-4B3F-AE9E-2F69D4DF849A}G:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"TCP Query User{D4B59AC5-037B-4B23-AE0D-308BA9B10346}G:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=6 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"TCP Query User{E21F8C6B-91F0-41E7-8FF4-0F5D8717616C}C:\program files\limewire\limewire.exe" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{E29423B2-E9F6-4E45-9863-631E7C2A33FE}C:\program files\curse\curseclient.exe" = protocol=6 | dir=in | app=c:\program files\curse\curseclient.exe |
"TCP Query User{F4B4D304-856F-4F2D-AC2F-8A4FE9CE2DE2}C:\users\attila\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\attila\program files\dna\btdna.exe |
"UDP Query User{09F63436-2EF9-4B60-82A5-7B8009B22318}C:\program files\electronic arts\battlefield bad company 2\bfbc2game.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\battlefield bad company 2\bfbc2game.exe |
"UDP Query User{1114A412-AB6B-421C-970E-9A770B3968A1}C:\program files\limewire\limewire.exe" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"UDP Query User{1268EEBF-7380-4C63-95BC-F54FE56A261C}G:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe |
"UDP Query User{17CB17DA-2975-479D-A8C1-C8DF34925962}C:\program files\steam\steamapps\common\fallout 3\fallout3.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\common\fallout 3\fallout3.exe |
"UDP Query User{25628BCE-2C06-469F-8F69-E388B598234F}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{38E25AF8-051F-4BF0-B00F-7BC3AFCE75A4}C:\program files\curse\curseclient.exe" = protocol=17 | dir=in | app=c:\program files\curse\curseclient.exe |
"UDP Query User{3B7C3812-B231-4912-9A66-F04BDD1444DE}G:\steam\steamapps\common\planetside 2\planetside2.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\common\planetside 2\planetside2.exe |
"UDP Query User{44FBFFB4-8D11-444B-97B6-05BFAE4CC3DE}C:\program files\yahoo!\messenger\yahoomessenger.exe" = protocol=17 | dir=in | app=c:\program files\yahoo!\messenger\yahoomessenger.exe |
"UDP Query User{467FD82C-616D-434F-A25A-FFD0A62D44BC}C:\program files\starcraft ii\versions\base23260\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base23260\sc2.exe |
"UDP Query User{49EF603A-E8C6-4DA3-8489-29D4C7156E09}C:\users\public\games\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\public\games\world of warcraft\launcher.exe |
"UDP Query User{4D7B9D4A-7164-4A7B-B652-9ABA7D697089}C:\program files\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base15405\sc2.exe |
"UDP Query User{5095B6D0-0825-41B1-9AB2-142FD5ED8F0E}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |
"UDP Query User{5A420ADF-E29E-455C-BFE3-A2FF8A30D67E}C:\program files\steam\steamapps\just2damndgood\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=c:\program files\steam\steamapps\just2damndgood\team fortress 2\hl2.exe |
"UDP Query User{83CBFE16-497B-4C5A-89D6-9735FCCDA562}C:\users\attila\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\attila\program files\dna\btdna.exe |
"UDP Query User{9EE7BA47-46FF-4D5B-AA75-EEC874EE1471}D:6\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=17 | dir=in | app=d:6\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"UDP Query User{A620CE57-7F41-498A-9401-549BD0C0ED71}C:\program files\starcraft ii\versions\base24944\sc2.exe" = protocol=17 | dir=in | app=c:\program files\starcraft ii\versions\base24944\sc2.exe |
"UDP Query User{A9332795-F54F-47E8-82AF-DD2335ED1490}C:\users\attila\appdata\local\warframe\downloaded\public\warframe.exe" = protocol=17 | dir=in | app=c:\users\attila\appdata\local\warframe\downloaded\public\warframe.exe |
"UDP Query User{AB3A84EE-73BB-48F0-BE07-34C7A23DC2FC}G:\steam\steamapps\common\dead island\deadislandgame.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dead island\deadislandgame.exe |
"UDP Query User{ADE5D561-6208-431D-9CD4-1DE7429E9DCE}G:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe |
"UDP Query User{B135306A-86C6-48E7-9DC7-DBE0A0196DE6}C:\users\attila\appdata\local\temp\gw2.exe" = protocol=17 | dir=in | app=c:\users\attila\appdata\local\temp\gw2.exe |
"UDP Query User{B375777B-650D-47B0-B7A0-5D2ACA1615A3}C:\users\attila\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\attila\program files\dna\btdna.exe |
"UDP Query User{CB05A094-385D-4749-8114-F2799C0FFB3C}G:\steam\steamapps\common\autonomous prototype\auto.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\common\autonomous prototype\auto.exe |
"UDP Query User{D8360010-F17B-490B-8033-82BDBE323E22}C:\program files\turbine\ddo unlimited\dndclient.exe" = protocol=17 | dir=in | app=c:\program files\turbine\ddo unlimited\dndclient.exe |
"UDP Query User{F62DC31E-2B37-4572-80D9-38668CE6CA01}G:\steam\steamapps\just2damndgood\team fortress 2\hl2.exe" = protocol=17 | dir=in | app=g:\steam\steamapps\just2damndgood\team fortress 2\hl2.exe |
"UDP Query User{FB3EF81C-1F18-428B-BF6F-328FFB026A15}C:\program files\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\program files\guild wars 2\gw2.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00203668-8170-44A0-BE44-B632FA4D780F}" = Adobe AIR
"{0394CDC8-FABD-4ED8-B104-03393876DFDF}" = Roxio Creator Tools
"{03B25762-461B-22C8-9AF0-170F3D749061}" = Catalyst Control Center Graphics Previews Vista
"{07159635-9DFE-4105-BFC0-2817DB540C68}" = Roxio Activation Module
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC4
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0A0F73EF-BFFA-42CE-A60E-74FB9F02F270}" = Warframe
"{0AC7F464-85E9-337D-B100-DC178C14A699}" = Catalyst Control Center Core Implementation
"{0BB1DBF8-DEF9-90DF-B7D8-2E3E67D79FB3}" = AMD Catalyst Install Manager
"{0D397393-9B50-4C52-84D5-77E344289F87}" = Roxio Creator Data
"{10621ADB-04B8-94B5-0520-E799FBCFE366}" = CCC Help German
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{15E63A3E-5FEC-FC64-C09D-757F2753DA10}" = CCC Help Italian
"{162B71B8-8464-4680-A086-601D555B331D}" = Apple Mobile Device Support
"{16F3A269-C49C-3EA8-76B6-3006007CE201}" = CCC Help Portuguese
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1A44135B-3127-9AEE-5686-F64DA4F262CA}" = Catalyst Control Center Graphics Previews Common
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FECF5F8-8E75-432C-9FF7-1C04F1956B54}" = Realtek Ethernet Network Card Diagnostic tool for Windows Vista
"{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{231A1A09-FDF2-45F2-B3D1-964CECE372BC}" = Seagate Manager Installer
"{2573A5FB-0352-4B85-E948-10FFCDD28731}" = Catalyst Control Center InstallProxy
"{2687340C-C114-47DC-9F0E-C1BA85FEB001}" = POWERPREP II
"{26A24AE4-039D-4CA4-87B4-2F83217025FF}" = Java 7 Update 25
"{276B965A-AC01-955C-E678-C8D25C58A42B}" = Catalyst Control Center Graphics Previews Common
"{29EF24BB-EF96-0D83-4142-2488827609B1}" = CCC Help Dutch
"{2D8CED57-CCDB-4D86-9087-3BBCAE8F8F22}" = Six Updater
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{2F2AE1BD-90B2-F4C0-3D32-4653B5B65AB1}" = Catalyst Control Center InstallProxy
"{2F56F921-7281-17D7-C628-EDC320DB1AF3}" = CCC Help French
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java™ 6 Update 7
"{33126DA3-B1C3-A57F-B8DD-8D10B00698DC}" = Catalyst Control Center
"{34F93E31-E1A0-421C-8E86-BCF7C4193A91}" = LogMeIn
"{37F964E4-9C3F-4066-B933-1747D3AC6737}" = Personal Entertainment Launcher
"{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D98AE11-B5A5-1EDB-F815-B1C2DA7BE1DB}" = Catalyst Control Center InstallProxy
"{3E8DD348-4174-4fe8-8FDC-238AAFBD2488}" = HP Photosmart All-In-One Software 9.0
"{4343080E-448E-4E2C-B27F-B91000028201}" = Dead Rising 2
"{44B2E182-DD85-45FC-9F51-326B81D7C7F1}" = Fax
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{5070FEB6-D861-648C-95EA-D08B15139677}" = CCC Help Turkish
"{507A4C55-8DAF-1607-0B3B-36F975039B2D}" = CCC Help Korean
"{56BB049F-DAD3-4D9E-BC83-E4D778EAE0BD}" = CCC Help Norwegian
"{56CDA83B-BC0B-A4A7-BD48-1176A6C97033}" = Catalyst Control Center Graphics Light
"{5747D461-B32A-4EF8-9D7A-EBCA071570B9}" = iSpy
"{59D268DF-CCA9-44C5-8F96-2E51BB34C829}" = Microsoft Security Client
"{5D30F159-FFB9-458F-8A03-1747DDE499D8}" = Overwolf
"{5DE28421-7661-5A77-F667-5FDC46170AD8}" = CCC Help Swedish
"{5EA47F98-C7D2-2C53-0316-CF59E197116D}" = CCC Help Finnish
"{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}" = GameSpy Comrade
"{619CDD8A-14B6-43A1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{6530FDAA-5B1F-4830-95BB-650E9804D239}" = UE3Redist
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6A7DF5D8-2DDA-56C0-CC4A-667EC297787D}" = CCC Help Thai
"{6C772996-BFF3-3C8C-860B-B3D48FF05D65}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.51106
"{6F962C4B-9924-E471-080F-55E9E7678F3B}" = ccc-utility
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{75685CA8-0B74-45BB-9C64-744A0FB79EDC}" = Business Tools Launcher
"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client
"{78D7DA9D-C97B-477E-8D05-84ECE394BBCF}" = DayZ Commander
"{79BF4901-1EC4-4726-B3C2-A7859706C6E7}" = League of Legends
"{7A8A86CF-71B4-4517-919F-43E493547346}" = CCC Help Danish
"{7D5BFB15-8BC7-2170-144F-7F585FE9FDF1}" = CCC Help Japanese
"{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}" = Dell Getting Started Guide
"{7E77E37C-1806-ADFD-C98B-5F1465781D8F}" = CCC Help Chinese Traditional
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83FFCFC7-88C6-41C6-8752-958A45325C82}" = Roxio Creator Audio
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{880AF49C-34F7-4285-A8AD-8F7A3D1C33DC}" = Roxio Creator BDAV Plugin
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{88DCB080-7A56-5697-4407-21BD03DCE401}" = Catalyst Control Center Graphics Full New
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A0B485A-639F-751F-7CA9-744F15BC54F8}" = CCC Help Czech
"{8AC7ACAD-10E5-E7F4-481A-29C4C8B19990}" = Catalyst Control Center Graphics Full Existing
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX
"{8BFFC140-7C6F-CCB0-B85B-2AE63922C919}" = CCC Help Hungarian
"{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}" = Sonic CinePlayer Decoder Pack
"{8E4F1F84-B054-5875-ABF4-1246B3CFD48E}" = CCC Help Russian
"{8e70e4e1-06d7-470b-9f74-a51bef21088e}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106
"{92482FB3-C05B-41C6-89E7-75D985602A6E}" = System Requirements Lab
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{93DE6349-A17B-8CA8-181F-6DB7A2E1F1C7}" = Catalyst Control Center Localization All
"{93FF055C-7E0B-4E26-AAFB-2C4333E2D7D0}" = Logitech Gaming Software 8.12
"{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules
"{96AD3B61-EAE2-11E2-9E72-B8AC6F98CCE3}" = Google Earth
"{97E21DF5-574A-67C2-6ECC-0AC11F0ABF3C}" = CCC Help Polish
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9E4F0E65-209E-4713-8BE2-7F8802BB3987}_is1" = War Inc Battlezone version 1.0.0
"{A25FF1C0-80B6-4B8B-A551-DC525697A408}" = AMD APP SDK Runtime
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.7)
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{B051D1F8-8A3D-096B-1BC5-15F111F4EE2D}" = CCC Help Greek
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B56BA529-977E-4276-0325-A94BF57E1B65}" = CCC Help Spanish
"{B8ABB25D-1E30-4ED7-A3CE-0F8BED439647}" = Product Support Launcher
"{B93EEE50-9C8F-45DF-95E4-3D85A6E242F3}" = DarksidersInstaller
"{BC3051A7-1021-4B57-A3DA-AAC24566FAE7}_is1" = The War Z version alpha
"{C26B06A9-27BB-45B0-9873-9C623EC2BA38}" = iTunes
"{C2D541C2-B516-B049-EC3F-41B7A8E1C72D}" = ccc-utility
"{C35CCBEB-5A54-4DD8-9EC8-110F2A8154B3}" = Motorola Mobile Drivers Installation 5.1.0
"{C4124E95-5061-4776-8D5D-E3D931C778E1}" = Microsoft VC9 runtime libraries
"{C580908C-B3BA-4C19-BD60-16F02F272201}" = BattleForge™
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator DE
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CB4532F7-A1BD-46D2-9938-3E7D4656FB18}" = Razer Lachesis
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFAB3721-549D-4827-A4E8-7F90192114AB}" = Battlefield 4™ Beta
"{D68F16A7-9447-8A92-7EF3-A4E26B2A95EE}" = CCC Help English
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{DE9CF741-20F7-488B-8B85-9D0F86FA51B4}" = TortoiseSVN 1.7.7.22907 (32 bit)
"{E04810F9-4BAC-C803-82F1-241041A44897}" = CCC Help English
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E362724E-9320-4946-AF34-874E7B6B2927}" = System Requirements Lab CYRI
"{E3AC9740-66D4-412F-AE55-DD0428F78175}" = Razer BlackWidow Ultimate
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E6B87DC4-2B3D-4483-ADFF-E483BF718991}" = OpenOffice.org 3.1
"{E824E81C-80A4-3DFF-B5F9-4842A9FF5F7F}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.51106
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{ED2A4AA9-11F8-8338-0B18-CD9C543E876E}" = CCC Help Chinese Standard
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EF0D2E55-6FE2-4e35-BE22-A742E85D84E3}" = PS_AIO_02_Software_min
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F751C062-87DA-4D33-8A12-6E7F1D4C051C}" = Netflix in Windows Media Center
"{F9706A8C-D740-42CA-8703-E08EDD0F0778}" = LogMeIn Hamachi
"{FAA7F8FF-3C05-4A61-8F14-D8A6E9ED6623}" = ooVoo
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe AIR" = Adobe AIR
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AIM Toolbar" = AIM Toolbar
"Amazon Games & Software Downloader_is1" = Amazon Games & Software Downloader
"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.10
"AutoHotkey" = AutoHotkey 1.0.48.05
"B076073A-5527-4f4f-B46B-B10692277DA2_is1" = DisplayFusion 5.0
"Battlelog Web Plugins" = Battlelog Web Plugins
"Cake Mania_is1" = Cake Mania
"Cheat Engine 6.0_is1" = Cheat Engine 6.0
"Debut" = Debut Video Capture Software
"Diablo III" = Diablo III
"DivX Setup" = DivX Setup
"ESET Online Scanner" = ESET Online Scanner v3
"ESN Sonar-0.70.4" = ESN Sonar
"EVE" = EVE Online (remove only)
"Google Desktop" = Google Desktop
"Google Updater" = Google Updater
"Guild Wars 2" = Guild Wars 2
"Hardware Helper_is1" = Hardware Helper
"HDMI" = Intel® Graphics Media Accelerator Driver
"InstallShield_{231A1A09-FDF2-45F2-B3D1-964CECE372BC}" = Seagate Manager Installer
"Jawbone Updater" = Jawbone Updater
"League of Legends 3.0.0" = League of Legends
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 25.0 (x86 en-US)" = Mozilla Firefox 25.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Origin" = Origin
"Rockstar Games Social Club" = Rockstar Games Social Club
"Sandboxie" = Sandboxie 3.62 (32-bit)
"StarCraft II" = StarCraft II
"Steam App 102810" = Gatling Gears
"Steam App 105400" = Fable III
"Steam App 105600" = Terraria
"Steam App 10680" = Aliens vs. Predator
"Steam App 108710" = Alan Wake
"Steam App 108800" = Crysis 2 Maximum Edition
"Steam App 110800" = L.A. Noire
"Steam App 111800" = Blocks That Matter
"Steam App 11200" = Shadowgrounds: Survivor
"Steam App 113200" = The Binding of Isaac
"Steam App 11450" = Overlord
"Steam App 115100" = Costume Quest
"Steam App 115110" = Stacking
"Steam App 12100" = Grand Theft Auto III
"Steam App 12110" = Grand Theft Auto: Vice City
"Steam App 12120" = Grand Theft Auto: San Andreas
"Steam App 12200" = Bully: Scholarship Edition
"Steam App 1250" = Killing Floor
"Steam App 12710" = Overlord: Raising [bleep]
"Steam App 12810" = Overlord II
"Steam App 12900" = Audiosurf
"Steam App 1510" = Uplink
"Steam App 15520" = AaAaAA!!! - A Reckless Disregard for Gravity
"Steam App 16450" = F.E.A.R. 2: Project Origin
"Steam App 17300" = Crysis
"Steam App 17330" = Crysis Warhead
"Steam App 17340" = Crysis Wars
"Steam App 17390" = Spore
"Steam App 17410" = Mirror's Edge
"Steam App 17440" = Spore: Creepy & Cute Parts Pack
"Steam App 17460" = Mass Effect
"Steam App 17470" = Dead Space
"Steam App 18000" = On the Rain-Slick Precipice of Darkness, Episode One
"Steam App 18020" = On the Rain-Slick Precipice of Darkness, Episode Two
"Steam App 18700" = And Yet It Moves
"Steam App 19680" = Alice: Madness Returns
"Steam App 200010" = Quantum Conundrum
"Steam App 200390" = Oil Rush
"Steam App 200510" = XCOM: Enemy Unknown
"Steam App 200900" = Cave Story+
"Steam App 201790" = Orcs Must Die! 2
"Steam App 202170" = Sleeping Dogs™
"Steam App 202730" = Dynamite Jack
"Steam App 204300" = Awesomenauts
"Steam App 204360" = Castle Crashers
"Steam App 205060" = BIT.TRIP CORE
"Steam App 205070" = BIT.TRIP VOID
"Steam App 205080" = BIT.TRIP FATE
"Steam App 205100" = Dishonored
"Steam App 20540" = Company of Heroes: Tales of Valor
"Steam App 205910" = Tiny and Big: Grandpa's Leftovers
"Steam App 206420" = Saints Row IV
"Steam App 207490" = Rayman Origins
"Steam App 207610" = The Walking Dead
"Steam App 20900" = The Witcher: Enhanced Edition
"Steam App 21090" = F.E.A.R.
"Steam App 21110" = F.E.A.R.: Extraction Point
"Steam App 21120" = F.E.A.R.: Perseus Mandate
"Steam App 212480" = Sonic & All-Stars Racing Transformed
"Steam App 212680" = FTL: Faster Than Light
"Steam App 214970" = Intrusion 2
"Steam App 218060" = BIT.TRIP Presents... Runner2: Future Legend of Rhythm Alien
"Steam App 218620" = PAYDAY 2
"Steam App 218680" = Scribblenauts Unlimited
"Steam App 218740" = Pid
"Steam App 219150" = Hotline Miami
"Steam App 219540" = Arma 2: Operation Arrowhead Beta
"Steam App 219740" = Don't Starve
"Steam App 220" = Half-Life 2
"Steam App 22000" = World of Goo
"Steam App 220460" = Cargo Commander
"Steam App 22120" = Penumbra: Black Plague
"Steam App 221260" = Little Inferno
"Steam App 22140" = Penumbra: Requiem
"Steam App 221640" = Super Hexagon
"Steam App 22180" = Penumbra: Overture
"Steam App 22200" = Zeno Clash
"Steam App 222730" = Reus
"Steam App 22300" = Fallout 3
"Steam App 22350" = BRINK
"Steam App 224260" = No More Room in [bleep]
"Steam App 224540" = Ace of Spades
"Steam App 225120" = BRAZEN Prototype
"Steam App 225260" = Brütal Legend
"Steam App 225940" = Happy Song Prototype
"Steam App 22610" = Alien Breed: Impact
"Steam App 22650" = Alien Breed 2: Assault
"Steam App 226980" = Pinball FX2
"Steam App 228060" = Black Lake Prototype
"Steam App 228100" = Autonomous Prototype
"Steam App 228200" = Company of Heroes (New Steam Version)
"Steam App 228300" = Remember Me
"Steam App 229520" = Dungeon Hearts
"Steam App 23310" = The Last Remnant
"Steam App 233740" = Organ Trail: Director's Cut
"Steam App 234710" = Poker Night 2
"Steam App 23490" = Tropico 3 - Steam Special Edition
"Steam App 236090" = Dust: An Elysian Tail
"Steam App 240" = Counter-Strike: Source
"Steam App 24420" = Aquaria
"Steam App 245170" = Skullgirls
"Steam App 24720" = Spore: Galactic Adventures
"Steam App 24740" = Burnout Paradise: The Ultimate Box
"Steam App 247750" = The Stanley Parable Demo
"Steam App 24780" = SimCity 4 Deluxe
"Steam App 24980" = Mass Effect 2
"Steam App 2500" = Shadowgrounds
"Steam App 26900" = Crayon Physics Deluxe
"Steam App 28050" = Deus Ex: Human Revolution
"Steam App 29180" = Osmos
"Steam App 31280" = Poker Night at the Inventory
"Steam App 33460" = From Dust
"Steam App 33900" = Arma 2
"Steam App 33930" = Arma 2: Operation Arrowhead
"Steam App 34830" = Sniper: Ghost Warrior
"Steam App 35140" = Batman: Arkham Asylum GOTY Edition
"Steam App 35700" = Trine
"Steam App 3710" = Judge Dredd: Dredd vs Death
"Steam App 3830" = Psychonauts
"Steam App 38900" = Rhythm Zone
"Steam App 3900" = Sid Meier's Civilization IV
"Steam App 400" = Portal
"Steam App 4000" = Garry's Mod
"Steam App 40800" = Super Meat Boy
"Steam App 41000" = Serious Sam HD: The First Encounter
"Steam App 41010" = Serious Sam HD: The Second Encounter
"Steam App 41050" = Serious Sam Classic: The First Encounter
"Steam App 41060" = Serious Sam Classic: The Second Encounter
"Steam App 41070" = Serious Sam 3: BFE
"Steam App 41210" = Eufloria
"Steam App 41800" = Gratuitous Space Battles
"Steam App 42120" = Lead and Gold - Gangs of the Wild West
"Steam App 42910" = Magicka
"Steam App 43110" = Metro 2033
"Steam App 440" = Team Fortress 2
"Steam App 4500" = S.T.A.L.K.E.R.: Shadow of Chernobyl
"Steam App 4540" = Titan Quest
"Steam App 4560" = Company of Heroes
"Steam App 45740" = Dead Rising 2
"Steam App 47790" = Medal of Honor™ Single Player
"Steam App 47830" = Medal of Honor™ Multiplayer
"Steam App 47890" = The Sims™ 3
"Steam App 48000" = LIMBO
"Steam App 48240" = Anno 2070
"Steam App 49520" = Borderlands 2
"Steam App 49600" = Beat Hazard
"Steam App 500" = Left 4 Dead
"Steam App 50620" = Darksiders
"Steam App 550" = Left 4 Dead 2
"Steam App 55040" = Atom Zombie Smasher
"Steam App 55110" = Red Faction: Armageddon
"Steam App 55230" = Saints Row: The Third
"Steam App 570" = Dota 2
"Steam App 57300" = Amnesia: The Dark Descent
"Steam App 61100" = Lucid
"Steam App 6120" = Shank
"Steam App 620" = Portal 2
"Steam App 63380" = Sniper Elite V2
"Steam App 63700" = BIT.TRIP BEAT
"Steam App 63710" = BIT.TRIP RUNNER
"Steam App 65800" = Dungeon Defenders
"Steam App 67370" = The Darkness II
"Steam App 70" = Half-Life
"Steam App 70300" = VVVVVV
"Steam App 70400" = Recettear: An Item Shop's Tale
"Steam App 72200" = Universe Sandbox
"Steam App 72500" = Arcadia
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 7670" = BioShock
"Steam App 8190" = Just Cause 2
"Steam App 8870" = BioShock Infinite
"Steam App 91200" = Anomaly Warzone Earth
"Steam App 91310" = Dead Island
"Steam App 91600" = Sanctum
"Steam App 9340" = Company of Heroes: Opposing Fronts
"Steam App 94200" = Jamestown
"Steam App 94500" = Back to the Future: Ep 2 - Get Tannen!
"Steam App 94510" = Back to the Future: Ep 3 - Citizen Brown
"Steam App 94520" = Back to the Future: Ep 4 - Double Visions
"Steam App 94530" = Back to the Future: Ep 5 - OUTATIME
"Steam App 95300" = Capsized
"Steam App 96200" = Steel Storm: Burning Retribution
"Steam App 97000" = Solar 2
"Steam App 98800" = Dungeons of Dredmor
"Steam App 99700" = NightSky
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"ToolBox" = NCH Toolbox
"UltSounds" = Windows Sound Schemes
"UltSounds2" = Ultimate Extras sounds from Microsoft® Tinker™
"Voxatron" = Voxatron 0.1.3
"WinGimp-2.0_is1" = GIMP 2.6.7
"WinPcapInst" = WinPcap 4.1.2
"WinRAR archiver" = WinRAR archiver
"Wireshark" = Wireshark 1.4.0
"World of Warcraft" = World of Warcraft
"YTdetect" = Yahoo! Detect
"ZumoCast" = ZumoCast

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"090215de958f1060" = Curse Client
"BitTorrent DNA" = DNA
"InstallShield_{6530FDAA-5B1F-4830-95BB-650E9804D239}" = UE3Redist
"Move Media Player" = Move Media Player
"SOE-DC Universe Online Beta" = DC Universe Online
"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ System Events ]
Error - 11/7/2013 11:16:18 PM | Computer Name = Attila-PC | Source = Microsoft Antimalware | ID = 2001
Description = %%860 has encountered an error trying to update signatures. New Signature
Version: Previous Signature Version: 1.161.1475.0 Update Source: %%859 Update Stage:
%%852 Source Path: http://www.microsoft.com Signature Type: %%800 Update Type: %%803

User:
NT AUTHORITY\SYSTEM Current Engine Version: Previous Engine Version: 1.1.10003.0

Error
code: 0x80096001 Error description: A system-level error occurred while verifying
trust.


< End of report >
  • 0

#14
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Procexp Log:
Process CPU Private Bytes Working Set PID Description Company Name Verified Signer
System Idle Process 95.79 0 K 24 K 0
procexp.exe 1.53 38,612 K 42,012 K 2612 Sysinternals Process Explorer Sysinternals - www.sysinternals.com (Verified) Microsoft Corporation
wmplayer.exe 1.15 45,532 K 34,504 K 5500 Windows Media Player Microsoft Corporation (Verified) Microsoft Windows
dwm.exe 0.77 49,232 K 62,656 K 1644 Desktop Window Manager Microsoft Corporation (Verified) Microsoft Windows
TeaTimer.exe 0.38 70,124 K 56,004 K 3100 System settings protector Safer-Networking Ltd. (No signature was present in the subject) Safer-Networking Ltd.
explorer.exe 0.38 69,972 K 70,456 K 3176 Windows Explorer Microsoft Corporation (Verified) Microsoft Windows
firefox.exe < 0.01 275,932 K 292,012 K 3632 Firefox Mozilla Corporation (Verified) Mozilla Corporation
System < 0.01 0 K 36,068 K 4
svchost.exe < 0.01 3,972 K 6,700 K 900 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
JawboneUpdater.exe < 0.01 4,384 K 9,836 K 3476 (Verified) AliphCom
svchost.exe < 0.01 73,552 K 81,012 K 1248 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
BlackWidowUltimateTray.exe < 0.01 4,972 K 6,440 K 2876 Razer BlackWidow Ultimate Systray Razer USA Ltd (Verified) Razer USA Ltd
DisplayFusion.exe < 0.01 50,944 K 44,328 K 3056 DisplayFusion Binary Fortress Software (Verified) Binary Fortress Software Ltd.
WmiPrvSE.exe < 0.01 3,728 K 6,284 K 2232 WMI Provider Host Microsoft Corporation (Verified) Microsoft Windows
csrss.exe < 0.01 3,000 K 10,924 K 632 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
PMB.exe < 0.01 19,032 K 14,704 K 3084 Pando Media Booster (Verified) Pando Networks
WMPSideShowGadget.exe < 0.01 9,208 K 9,604 K 5444 Windows Media Player Gadget for Windows SideShow capable devices Microsoft Corporation (Verified) Microsoft Windows
iPodService.exe < 0.01 3,048 K 5,276 K 4408 iPodService Module Apple Inc. (Verified) Apple Inc.
unsecapp.exe < 0.01 2,444 K 4,832 K 4784 Sink to receive asynchronous callbacks for WMI client application Microsoft Corporation (Verified) Microsoft Windows
MOM.exe < 0.01 34,100 K 12,412 K 3224 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc. (No signature was present in the subject) Advanced Micro Devices Inc.
hamachi-2.exe < 0.01 4,036 K 6,660 K 3992 Hamachi Client Tunneling Engine LogMeIn Inc. (Verified) LogMeIn
TSVNCache.exe < 0.01 3,496 K 5,472 K 2460 TortoiseSVN status cache http://tortoisesvn.net (Verified) Stefan Kueng - Open Source Developer
CCC.exe < 0.01 21,088 K 14,700 K 5300 Catalyst Control Center: Host application ATI Technologies Inc. (No signature was present in the subject) ATI Technologies Inc.
WUDFHost.exe < 0.01 4,236 K 6,304 K 1832 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
csrss.exe < 0.01 2,188 K 6,432 K 548 Client Server Runtime Process Microsoft Corporation (Verified) Microsoft Windows
DisplayFusionService.exe < 0.01 17,596 K 15,384 K 3788 DisplayFusion Service Binary Fortress Software (Verified) Binary Fortress Software Ltd.
svchost.exe < 0.01 80,972 K 81,356 K 1232 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
iTunesHelper.exe < 0.01 6,864 K 7,432 K 2628 iTunesHelper Module Apple Inc. (Verified) Apple Inc.
SearchIndexer.exe < 0.01 43,700 K 35,620 K 3148 Microsoft Windows Search Indexer Microsoft Corporation (Verified) Microsoft Windows
AppleMobileDeviceService.exe < 0.01 2,336 K 3,352 K 3744 Apple Mobile Device Service Apple Inc. (Verified) Apple Inc.
spoolsv.exe < 0.01 6,876 K 8,276 K 356 Spooler SubSystem App Microsoft Corporation (Verified) Microsoft Windows
Interrupts < 0.01 0 K 0 K n/a Hardware Interrupts and DPCs
WUDFHost.exe 3,000 K 5,676 K 1760 Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation (Verified) Microsoft Windows
wuauclt.exe 2,852 K 6,000 K 3132 Windows Update Microsoft Corporation (Verified) Microsoft Windows
WLIDSVCM.EXE 936 K 2,664 K 4876 Microsoft® Windows Live ID Service Monitor Microsoft Corporation (Verified) Microsoft Corporation
WLIDSVC.EXE 5,296 K 7,888 K 2944 Microsoft® Windows Live ID Service Microsoft Corporation (Verified) Microsoft Corporation
winlogon.exe 2,112 K 4,732 K 872 Windows Logon Application Microsoft Corporation (Verified) Microsoft Windows
wininit.exe 1,436 K 3,444 K 620 Windows Start-Up Application Microsoft Corporation (Verified) Microsoft Windows
taskeng.exe 8,964 K 7,648 K 5640 Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
taskeng.exe 14,096 K 12,440 K 2100 Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
taskeng.exe 2,124 K 5,804 K 2020 Task Scheduler Engine Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 24,644 K 20,888 K 1896 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 20,412 K 14,488 K 1184 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 4,428 K 6,352 K 964 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 9,900 K 12,292 K 1472 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 17,344 K 10,896 K 500 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 3,484 K 5,964 K 1364 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1,096 K 2,968 K 2108 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 868 K 2,704 K 2648 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1,856 K 4,444 K 2688 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 4,512 K 5,900 K 2692 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 600 K 1,964 K 1088 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 1,576 K 13,796 K 5616 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
svchost.exe 3,912 K 7,140 K 4676 Host Process for Windows Services Microsoft Corporation (Verified) Microsoft Windows
stxmenumgr.exe 2,180 K 5,380 K 2948 FreeAgent™ Launcher Seagate LLC (Verified) Seagate Technology
sprtsvc.exe 4,452 K 716 K 2736 SupportSoft Agent Service SupportSoft, Inc. (Verified) Dell Inc.
sprtcmd.exe 13,824 K 596 K 2588 Dell Support Center Updates SupportSoft, Inc. (Verified) Dell Inc.
smss.exe 344 K 780 K 480 Windows Session Manager Microsoft Corporation (Verified) Microsoft Windows
SLsvc.exe 6,436 K 5,652 K 1408 Microsoft Software Licensing Service Microsoft Corporation (Verified) Microsoft Windows
services.exe 3,208 K 6,572 K 668 Services and Controller app Microsoft Corporation (Verified) Microsoft Windows
SDWinSec.exe 6,676 K 10,052 K 3444 Spybot-S&D Security Center integration Safer Networking Ltd. (Verified) Safer Networking Ltd.
SbieSvc.exe 1,604 K 3,000 K 1568 Sandboxie Service SANDBOXIE L.T.D (Verified) SANDBOXIE L.T.D
RtHDVCpl.exe 8,864 K 6,288 K 2504 HD Audio Control Panel Realtek Semiconductor (Verified) Microsoft Windows Hardware Compatibility Publisher
razertra.exe 3,608 K 5,456 K 5252 razertra MFC Application (No signature was present in the subject)
razerofa.exe 1,104 K 2,820 K 4576 Razer OFA - On-the-Fly Sensitivity Adjustment Razer Inc. (No signature was present in the subject) Razer Inc.
razerhid.exe 4,292 K 6,944 K 2812 razerhid MFC Application (No signature was present in the subject)
PDVDDXSrv.exe 3,812 K 6,800 K 2576 CyberLink PowerDVD Resident Program CyberLink Corp. (Verified) CyberLink
OSD.exe 960 K 2,736 K 2884 OSD razercfg MFC Application (No signature was present in the subject) razercfg MFC Application
notepad.exe 2,152 K 5,752 K 5368 Notepad Microsoft Corporation (Verified) Microsoft Windows
msseces.exe 7,660 K 8,672 K 2988 Microsoft Security Client User Interface Microsoft Corporation (Verified) Microsoft Corporation
MsMpEng.exe 52,152 K 16,416 K 1028 Antimalware Service Executable Microsoft Corporation (Verified) Microsoft Corporation
mDNSResponder.exe 1,976 K 4,544 K 3760 Bonjour Service Apple Inc. (Verified) Apple Inc.
lsm.exe 2,844 K 5,104 K 692 Local Session Manager Service Microsoft Corporation (Verified) Microsoft Windows
lsass.exe 3,768 K 1,424 K 684 Local Security Authority Process Microsoft Corporation (Verified) Microsoft Windows
LMIGuardianSvc.exe 2,484 K 4,776 K 4092 LMIGuardianSvc LogMeIn, Inc. (Verified) LogMeIn
LCore.exe 53,180 K 30,712 K 2856 Logitech Gaming Framework Logitech Inc. (Verified) Logitech
jusched.exe 1,280 K 3,564 K 2968 Java™ Update Scheduler Oracle Corporation (Verified) Oracle America
FreeAgentService.exe 4,980 K 6,204 K 3868 Sync Windows Services Seagate Technology LLC (Verified) Seagate Technology
ehtray.exe 1,776 K 2,456 K 3008 Media Center Tray Applet Microsoft Corporation (Verified) Microsoft Windows
ehmsas.exe 1,220 K 4,032 K 3072 Media Center Media Status Aggregator Service Microsoft Corporation (Verified) Microsoft Windows
audiodg.exe 18,220 K 16,824 K 1332 Windows Audio Device Graph Isolation Microsoft Corporation (Verified) Microsoft Windows
atiesrxx.exe 968 K 2,788 K 1152 AMD External Events Service Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher
atieclxx.exe 3,212 K 5,088 K 1536 AMD External Events Client Module AMD (Verified) Microsoft Windows Hardware Compatibility Publisher
armsvc.exe 2,188 K 3,356 K 3692 Adobe Acrobat Update Service Adobe Systems Incorporated (Verified) Adobe Systems
AdobeARM.exe 7,468 K 10,080 K 2836 Adobe Reader and Acrobat Manager Adobe Systems Incorporated (Verified) Adobe Systems
  • 0

#15
ElevatedMinds

ElevatedMinds

    Member

  • Topic Starter
  • Member
  • PipPip
  • 40 posts
Speccy Log:

Attached Files


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP