AVG giving me warnings [Closed]

Today I started getting warnings from AVG about BCDBOOTS.exe

I let AVg do its thing and remove it, and then a warning for idle-Threads.exe came up. AVG failed to remove this one, the error said that access was denied.

Here are my OTL logs:

OTL logfile created on: 2/26/2014 10:50:38 AM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\E-z Rentals\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16618)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.86 Gb Total Physical Memory | 3.12 Gb Available Physical Memory | 53.30% Memory free

11.71 Gb Paging File | 8.02 Gb Available in Paging File | 68.53% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 449.66 Gb Total Space | 101.97 Gb Free Space | 22.68% Space Free | Partition Type: NTFS

Computer Name: BRIGANTIA | User Name: E-z Rentals | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\E-z Rentals\Downloads\OTL.exe (OldTimer Tools)

PRC - C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)

PRC - C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)

PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

PRC - C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe (Google Inc.)

PRC - C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)

PRC - C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)

PRC - C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)

PRC - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe (Apple Inc.)

PRC - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)

PRC - C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe (AVG Technologies CZ, s.r.o.)

PRC - C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (CyberLink Corp.)

PRC - C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe (CyberLink Corp.)

PRC - C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe ()

PRC - C:\Program Files (x86)\Launch Manager\LMutilps32.exe (Dritek System Inc.)

PRC - C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.)

PRC - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)

PRC - C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)

PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

PRC - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated)

PRC - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (NTI Corporation)

PRC - C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Acer Incorporated)

PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)

PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)

PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)

PRC - C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)

========== Modules (No Company Name) ==========

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_multiprocessing.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._gdi_.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_ssl.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\pywintypes27.dll ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_hashlib.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._windows_.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._html2.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32pipe.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32process.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_ctypes.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32pdh.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32inet.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._controls_.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\unicodedata.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._core_.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._misc_.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\pysqlite2._sqlite.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\windows._lib_cacheinvalidation.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\pythoncom27.dll ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32com.shell.shell.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_elementtree.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\pyexpat.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\wx._wizard.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32file.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32security.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32api.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\_socket.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32ts.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32event.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32profile.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\win32crypt.pyd ()

MOD - C:\Users\E-ZREN~1\AppData\Local\Temp\_MEI49962\select.pyd ()

MOD - C:\Program Files (x86)\Steam\bin\chromehtml.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ppgooglenaclpluginchrome.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\PepperFlash\pepflashplayer.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\pdf.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libglesv2.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\libegl.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\ffmpegsumo.dll ()

MOD - C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.117\chrome_elf.dll ()

MOD - C:\Program Files (x86)\Steam\SDL2.dll ()

MOD - C:\Program Files (x86)\Steam\bin\libcef.dll ()

MOD - C:\Program Files (x86)\Steam\libavresample-1.dll ()

MOD - C:\Program Files (x86)\Steam\libavutil-52.dll ()

MOD - C:\Program Files (x86)\Steam\bin\avcodec-53.dll ()

MOD - C:\Program Files (x86)\Steam\bin\avformat-53.dll ()

MOD - C:\Program Files (x86)\Steam\bin\avutil-51.dll ()

MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()

MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll ()

MOD - C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll ()

MOD - C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe ()

========== Services (SafeList) ==========

SRV:64bit: - (.Net Main) – C:\Windows\SysNative\idle-Threads.exe ()

SRV:64bit: - (.Net Semaphore) – C:\Windows\SysNative\semaphore-Threads.exe ()

SRV:64bit: - (.Net Crypt) – C:\Windows\SysNative\mutex-Threads.exe ()

SRV:64bit: - (.Net Security) – C:\Windows\SysNative\latch-Threads.exe ()

SRV:64bit: - (AMD External Events Utility) – C:\Windows\SysNative\atiesrxx.exe (AMD)

SRV:64bit: - (ePowerSvc) – C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated)

SRV:64bit: - (Live Updater Service) – C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Acer Incorporated)

SRV:64bit: - (TurboBoost) – C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel(R) Corporation)

SRV:64bit: - (NisSrv) – c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe (Microsoft Corporation)

SRV:64bit: - (MsMpSvc) – c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe (Microsoft Corporation)

SRV:64bit: - (wlcrasvc) – C:\Program Files\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)

SRV:64bit: - (WinDefend) – C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

SRV - (Steam Client Service) – C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)

SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)

SRV - (c2cautoupdatesvc) – C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation)

SRV - (c2cpnrsvc) – C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Microsoft Corporation)

SRV - (avgwd) – C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)

SRV - (avgfws) – C:\Program Files (x86)\AVG\AVG2013\avgfws.exe (AVG Technologies CZ, s.r.o.)

SRV - (SkypeUpdate) – C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)

SRV - (AVGIDSAgent) – C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)

SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)

SRV - (DsiWMIService) – C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)

SRV - (EgisTec Ticket Service) – C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe (Egis Technology Inc. )

SRV - (AdobeARMservice) – C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)

SRV - (GREGService) – C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Acer Incorporated)

SRV - (NTI IScheduleSvc) – C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe (NTI Corporation)

SRV - (UNS) – C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel Corporation)

SRV - (LMS) – C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation)

SRV - (IAStorDataMgrSvc) – C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)

SRV - (GamesAppService) – C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)

SRV - (NOBU) – C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Symantec Corporation)

SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)

SRV - (sftvsa) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)

SRV - (sftlist) – C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)

SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV:64bit: - (usbvox) – C:\Windows\SysNative\Drivers\usbvox64.sys ()

DRV:64bit: - (scssifilter) – C:\Windows\SysNative\drivers\scssifilter64.sys (Microsoft Corporation)

DRV:64bit: - (usbmp3) – C:\Windows\SysNative\Drivers\usbmp364.sys ()

DRV:64bit: - (usbwav) – C:\Windows\SysNative\Drivers\usbwav64.sys ()

DRV:64bit: - (AVGIDSDriver) – C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (Avgrkx64) – C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (Avgloga) – C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (AVGIDSHA) – C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (Avgldx64) – C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (Avgmfx64) – C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (Avgtdia) – C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (mwlPSDVDisk) – C:\Windows\SysNative\drivers\mwlPSDVDisk.sys (Egis Technology Inc.)

DRV:64bit: - (mwlPSDFilter) – C:\Windows\SysNative\drivers\mwlPSDFilter.sys (Egis Technology Inc.)

DRV:64bit: - (mwlPSDNServ) – C:\Windows\SysNative\drivers\mwlPSDNserv.sys (Egis Technology Inc.)

DRV:64bit: - (USBAAPL64) – C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)

DRV:64bit: - (Avgfwfd) – C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (GEARAspiWDM) – C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)

DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)

DRV:64bit: - (amdkmdag) – C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)

DRV:64bit: - (amdkmdap) – C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.)

DRV:64bit: - (NTIDrvr) – C:\Windows\SysNative\drivers\NTIDrvr.sys (NTI Corporation)

DRV:64bit: - (UBHelper) – C:\Windows\SysNative\drivers\UBHelper.sys (NTI Corporation)

DRV:64bit: - (intelkmd) – C:\Windows\SysNative\drivers\igdpmd64.sys (Intel Corporation)

DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)

DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)

DRV:64bit: - (BCM43XX) – C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)

DRV:64bit: - (nusb3xhc) – C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)

DRV:64bit: - (nusb3hub) – C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)

DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)

DRV:64bit: - (TurboB) – C:\Windows\SysNative\drivers\TurboB.sys (Intel(R) Corporation)

DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)

DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)

DRV:64bit: - (TsUsbGD) – C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)

DRV:64bit: - (NisDrv) – C:\Windows\SysNative\drivers\NisDrvWFP.sys (Microsoft Corporation)

DRV:64bit: - (MEIx64) – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)

DRV:64bit: - (IntcDAud) – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)

DRV:64bit: - (L1C) – C:\Windows\SysNative\drivers\L1C62x64.sys (Atheros Communications, Inc.)

DRV:64bit: - (SynTP) – C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)

DRV:64bit: - (RSUSBSTOR) – C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)

DRV:64bit: - (Sftvol) – C:\Windows\SysNative\drivers\Sftvollh.sys (Microsoft Corporation)

DRV:64bit: - (Sftredir) – C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)

DRV:64bit: - (Sftplay) – C:\Windows\SysNative\drivers\Sftplaylh.sys (Microsoft Corporation)

DRV:64bit: - (Sftfs) – C:\Windows\SysNative\drivers\Sftfslh.sys (Microsoft Corporation)

DRV:64bit: - (xusb21) – C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)

DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)

DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)

DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)

DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)

DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)

DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)

DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)

DRV - (Partizan) – C:\Windows\SysWOW64\drivers\Partizan.sys (Greatis Software)

DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form;=AARTDF&pc;=MAAR&src;=IE-SearchBox

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form;=AARTDF&pc;=MAAR&src;=IE-SearchBox

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

IE - HKCU\..\SearchScopes,DefaultScope = {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.8: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\E-z Rentals\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs;_ri={google:suggestRid}&xssi;=t&q;={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: http://www.google.com/

CHR - plugin: Error reading preferences file

CHR - Extension: Entanglement Web App = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\aciahcmjmecflokailenpkdchphgkefd\3.4.9_0\

CHR - Extension: Google Drive = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_1\

CHR - Extension: Missing e = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\bcjbagclppcgdbpobcpoojdjdmcjhpid\2.14.3_0\

CHR - Extension: Awesome XKCD Widget [ANTP] = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigeakmkgpgffiojjihhjlggonmomacp\2012.134.4.0_0\

CHR - Extension: YouTube = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\

CHR - Extension: Add to Amazon Wish List = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\ciagpekplgpbepdgggflgmahnjgiaced\1.0.0.10_0\

CHR - Extension: Google Search = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\

CHR - Extension: imgur Extension by Metronomik = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehoopddfhgaehhmphfcooacjdpmbjlao\2.0.10_0\

CHR - Extension: Polycraft = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\eopfmbpfhhfnklgmjpoehcjaajhpbhbl\1.0.0.17_0\

CHR - Extension: TweetDeck by Twitter = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl\3.5.11.1_0\

CHR - Extension: Feedly - News, Blogs and Youtube = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\hipbfijinpcgfogaopmgehiegacbhmob\18.2_0\

CHR - Extension: Cloud Reader = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdipabjmbhpdkjaihfjoikhjjeneebd\1.4.0_0\

CHR - Extension: FVD Downloader = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.5_0\

CHR - Extension: FVD Downloader = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp\5.6.5_0\modules\clickberry\_

CHR - Extension: Skype Click to Call = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.0.14735.1561_0\

CHR - Extension: Google Dictionary (by Google) = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgijmajocgfcbeboacabfgobmjgjcoja\3.2.1_0\

CHR - Extension: Goodbudget = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkhffmghajhedigppmcgiefaddneijge\2.0.0.0_0\

CHR - Extension: Twitch Now = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk\1.1.53_0\

CHR - Extension: Google Wallet = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

CHR - Extension: Gmail = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

CHR - Extension: Reditr - The Best Reddit Client = C:\Users\E-z Rentals\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmfcbbijgnhoebddbjpmlikabnbnddgb\0.3.2.1_0\

O1 HOSTS File: ([2009/06/10 16:00:26 | 000,000,824 | —- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found

O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Power Management] C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)

O4:64bit: - HKLM..\Run: [RtHDVBg_Dolby] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [ArcadeMovieService] C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe (CyberLink Corp.)

O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [Dolby Advanced Audio v2] C:\Dolby PCEE4\pcee4.exe (Dolby Laboratories Inc.)

O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)

O4 - HKLM..\Run: [NCUpdateHelper] C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe (NCSOFT Corporation)

O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [SuiteTray] C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.)

O4 - HKCU..\Run: [BitTorrent] C:\Users\E-z Rentals\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)

O4 - HKCU..\Run: [GoogleChromeAutoLaunch_3A04A3E6B8AF6DB82ED630D3BB3769D1] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKCU..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)

O4 - HKCU..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe ()

O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)

O4 - Startup: C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

O9 - Extra Button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)

O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 333 W Evelyn Ave. Mountain View, CA 94041)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: clonewarsadventures.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: freerealms.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: soe.com ([]* in Trusted sites)

O15 - HKCU\..Trusted Domains: sony.com ([]* in Trusted sites)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{94587D74-A094-4644-B863-22010A1D27D5}: DhcpNameServer = [removed]

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F9B075CC-2EB5-42C1-A2EC-01232D370FDD}: DhcpNameServer = 192.168.0.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\SkypeIEPlugin.dll (Microsoft Corporation)

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18:64bit: - Protocol\Handler\wlpg - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] – "%1" %*

O35:64bit: - HKLM\..exefile [open] – "%1" %*

O35 - HKLM\..comfile [open] – "%1" %*

O35 - HKLM\..exefile [open] – "%1" %*

O37:64bit: - HKLM\…com [@ = comfile] – "%1" %*

O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*

O37 - HKLM\…com [@ = comfile] – "%1" %*

O37 - HKLM\…exe [@ = exefile] – "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3acm - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.l3codecp - C:\Windows\SysWow64\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.)

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2014/02/26 10:38:15 | 000,035,816 | —- | C] (Greatis Software) – C:\Windows\SysWow64\drivers\Partizan.sys

[2014/02/26 10:37:46 | 000,000,000 | —D | C] – C:\Users\E-z Rentals\Documents\RegRun2

[2014/02/26 10:37:39 | 000,012,800 | —- | C] (Greatis Software, LLC.) – C:\Windows\SysWow64\drivers\UnHackMeDrv.sys

[2014/02/26 10:37:39 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe

[2014/02/26 10:37:39 | 000,000,000 | —D | C] – C:\Users\Public\Documents\regruninfo

[2014/02/26 10:37:25 | 000,000,000 | —D | C] – C:\Program Files (x86)\UnHackMe

[2014/02/26 03:15:37 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft Corporation

[2014/02/19 19:19:10 | 000,000,000 | —D | C] – C:\Users\E-z Rentals\Desktop\Akatsuki Myuuto, Bisyoujo Club Vol 1 (www.hentairules.net) (English, Mag Scans With Tank Addons)

[2014/02/17 04:08:28 | 000,000,000 | -HSD | C] – C:\Config.Msi

========== Files - Modified Within 30 Days ==========

[2014/02/26 10:38:15 | 000,035,816 | —- | M] (Greatis Software) – C:\Windows\SysWow64\drivers\Partizan.sys

[2014/02/26 10:37:52 | 000,000,002 | RHS- | M] () – C:\Windows\winstart.bat

[2014/02/26 10:37:52 | 000,000,002 | RHS- | M] () – C:\Windows\SysWow64\CONFIG.NT

[2014/02/26 10:37:52 | 000,000,002 | RHS- | M] () – C:\Windows\SysWow64\AUTOEXEC.NT

[2014/02/26 10:37:44 | 000,000,947 | —- | M] () – C:\Users\E-z Rentals\Desktop\UnHackMe.lnk

[2014/02/26 10:11:57 | 001,645,899 | —- | M] () – C:\Windows\SysNative\Microsoft.mshtml.zip

[2014/02/26 10:11:55 | 000,147,523 | RHS- | M] () – C:\Windows\SysNative\masteraclini.enu

[2014/02/26 10:11:55 | 000,033,112 | —- | M] () – C:\Windows\SysNative\Interop.SHDocVw.zip

[2014/02/26 10:09:00 | 000,000,830 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/02/26 10:07:14 | 000,000,908 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/02/26 10:06:56 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat

[2014/02/26 09:03:18 | 000,000,110 | R— | M] () – C:\Windows\SysNative\masteraclbini.enu

[2014/02/26 08:15:08 | 000,037,874 | —- | M] () – C:\Users\E-z Rentals\Documents\cc_20140226_081501.reg

[2014/02/26 07:50:46 | 000,016,976 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2014/02/26 07:50:46 | 000,016,976 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2014/02/26 04:26:15 | 000,000,904 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/02/26 04:25:50 | 420,368,383 | -HS- | M] () – C:\hiberfil.sys

[2014/02/23 09:30:57 | 000,002,187 | —- | M] () – C:\Users\Public\Desktop\Google Chrome.lnk

[2014/02/23 02:09:52 | 000,692,616 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe

[2014/02/23 02:09:52 | 000,071,048 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

[2014/02/17 11:38:50 | 000,012,800 | —- | M] (Greatis Software, LLC.) – C:\Windows\SysWow64\drivers\UnHackMeDrv.sys

========== Files Created - No Company Name ==========

[2014/02/26 10:37:52 | 000,000,002 | RHS- | C] () – C:\Windows\winstart.bat

[2014/02/26 10:37:52 | 000,000,002 | RHS- | C] () – C:\Windows\SysWow64\CONFIG.NT

[2014/02/26 10:37:52 | 000,000,002 | RHS- | C] () – C:\Windows\SysWow64\AUTOEXEC.NT

[2014/02/26 10:37:44 | 000,000,947 | —- | C] () – C:\Users\E-z Rentals\Desktop\UnHackMe.lnk

[2014/02/26 10:11:56 | 001,645,899 | —- | C] () – C:\Windows\SysNative\Microsoft.mshtml.zip

[2014/02/26 10:11:55 | 000,033,112 | —- | C] () – C:\Windows\SysNative\Interop.SHDocVw.zip

[2014/02/26 08:15:05 | 000,037,874 | —- | C] () – C:\Users\E-z Rentals\Documents\cc_20140226_081501.reg

[2013/09/22 19:10:18 | 000,000,268 | —- | C] () – C:\Windows\{789289CA-F73A-4A16-A331-54D498CE069F}_WiseFW.ini

[2013/09/13 06:57:02 | 000,000,120 | —- | C] () – C:\Windows\wininit.ini

[2013/06/30 07:21:15 | 000,004,096 | —- | C] () – C:\Windows\d3dx.dat

[2013/03/16 16:43:06 | 000,000,000 | —- | C] () – C:\Windows\ativpsrm.bin

[2013/03/16 16:40:00 | 000,003,929 | —- | C] () – C:\Windows\SysWow64\atipblup.dat

[2013/03/16 14:50:23 | 000,799,792 | —- | C] () – C:\Windows\SysWow64\PerfStringBackup.INI

========== ZeroAccess Check ==========

[2009/07/13 23:55:00 | 000,000,227 | RHS- | M] () – C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll – [2013/02/27 00:52:56 | 014,172,672 | —- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll – [2013/02/26 23:55:05 | 012,872,704 | —- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll – [2009/07/13 20:40:51 | 000,909,312 | —- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll – [2010/11/20 22:24:25 | 000,606,208 | —- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll – [2009/07/13 20:41:56 | 000,505,856 | —- | M] (Microsoft Corporation)

"ThreadingModel" = Both

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

========== LOP Check ==========

[2014/01/19 05:13:56 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\.minecraft

[2013/05/03 12:12:34 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\AVG2013

[2014/02/23 04:15:19 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Battle.net

[2014/02/26 10:45:09 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\BitTorrent

[2013/05/06 07:46:37 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Curse Advertising

[2013/05/07 09:50:39 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Digiarty

[2014/02/23 04:15:19 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\IrfanView

[2013/05/26 17:13:48 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\LibreOffice

[2013/07/27 10:30:39 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\LolClient

[2013/12/31 04:11:39 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Might & Magic Heroes VI

[2013/06/08 05:38:04 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\minmaxgames

[2013/10/10 20:51:58 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\MoreTerra

[2013/11/23 21:27:58 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Mumble

[2013/11/15 08:28:34 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\NCSOFT

[2013/07/29 17:56:00 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\ONScripter-EN

[2013/05/08 09:20:41 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\PowerCinema

[2013/12/21 03:33:49 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\RenPy

[2014/01/17 20:44:38 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Riot Games

[2013/07/31 18:47:09 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Rogue Legacy

[2013/03/16 14:42:35 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Screensaver

[2013/08/17 17:59:52 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\SoftGrid Client

[2014/01/19 02:32:50 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\SpaceEngineers

[2013/07/16 02:28:49 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\System

[2013/08/08 01:38:35 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\TP

[2013/05/03 12:11:42 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\TuneUp Software

[2013/07/14 22:41:04 | 000,000,000 | —D | M] – C:\Users\E-z Rentals\AppData\Roaming\Unity

[2013/07/16 02:39:17 | 000,000,000 | -HSD | M] – C:\Users\E-z Rentals\AppData\Roaming\wyUpdate AU

========== Purity Check ==========

========== Custom Scans ==========

< %USERPROFILE%\..|smtmp;true;true;true /FP >

< %temp%\smtmp\*.* /s > >

< MD5 for: EXPLORER.ADML >

[2010/11/21 02:06:30 | 000,003,695 | —- | M] () MD5=7A4C7F3CB156543113596988479CAFCE – C:\Windows\winsxs\amd64_microsoft-windows-s..ouppolicy.resources_31bf3856ad364e35_6.1.7600.16385_en-us_7ef5713984067904\Explorer.adml

< MD5 for: EXPLORER.ADMX >

[2009/06/10 15:53:55 | 000,003,836 | —- | M] () MD5=AD131A834808E6AFF4A3918DE05BFCF6 – C:\Windows\winsxs\amd64_microsoft-windows-shell-grouppolicy_31bf3856ad364e35_6.1.7600.16385_none_71af9b5b0a86e6b7\Explorer.admx

< MD5 for: EXPLORER.EXE >

[2011/07/14 00:30:29 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe

[2011/07/14 00:30:29 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\explorer.exe

[2011/07/14 00:30:29 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe

[2011/07/14 00:30:29 | 002,871,808 | —- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe

[2010/11/20 22:24:25 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe

[2011/07/14 00:30:29 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\SysWOW64\explorer.exe

[2011/07/14 00:30:29 | 002,616,320 | —- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E – C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe

[2010/11/20 22:24:11 | 002,872,320 | —- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 – C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe

< MD5 for: EXPLORER.EXE.MUI >

[2010/11/21 02:06:17 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\en-US\explorer.exe.mui

[2010/11/21 02:06:17 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=4B87EEFDC8E253F846A7DFB49A8E6C70 – C:\Windows\winsxs\amd64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_61e778c48d52d19b\explorer.exe.mui

[2010/11/21 02:06:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\SysWOW64\en-US\explorer.exe.mui

[2010/11/21 02:06:19 | 000,022,016 | —- | M] (Microsoft Corporation) MD5=B9F4B1CA23D60775736059D72BA48526 – C:\Windows\winsxs\wow64_microsoft-windows-explorer.resources_31bf3856ad364e35_6.1.7600.16385_en-us_6c3c2316c1b39396\explorer.exe.mui

< MD5 for: EXPLORER.EXE-D5E97654.PF >

[2014/02/26 04:27:05 | 000,048,260 | —- | M] () MD5=4A3222F56B0DD671931B32856480E68F – C:\Windows\Prefetch\EXPLORER.EXE-D5E97654.pf

< MD5 for: IEXPLORE.EXE >

[2013/05/16 23:10:41 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=1423FF1BFD2ECD9CFC8C17EA4F98B20F – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16490_none_0d07eadd80a334bf\iexplore.exe

[2013/02/22 02:04:50 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=25B53709A37C3FD814B68EA0A92D18F9 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_0d238c71808d94e7\iexplore.exe

[2013/02/21 23:10:00 | 000,757,376 | —- | M] (Microsoft Corporation) MD5=32732CEDE2A1106B736EF3D84054EE04 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16476_none_177836c3b4ee56e2\iexplore.exe

[2013/04/04 17:47:49 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=3F00BE80B9CEA20B7FE7363D15EDDB94 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_176a65f9b4f926ce\iexplore.exe

[2013/02/21 23:10:31 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=4145E2B5663F6FACC08EFDB17B658BB2 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_17f703a2ce14129d\iexplore.exe

[2013/05/16 18:34:33 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=67EE46FD4D3B56531C5DD1BDC149275A – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16490_none_175c952fb503f6ba\iexplore.exe

[2013/07/04 02:07:30 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=774C18BA997F40DA7F5A9A4AF822F49C – C:\Program Files\Internet Explorer\iexplore.exe

[2013/07/04 02:07:30 | 000,775,256 | —- | M] (Microsoft Corporation) MD5=774C18BA997F40DA7F5A9A4AF822F49C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16618_none_168386401e431b98\iexplore.exe

[2010/11/20 22:24:43 | 000,695,056 | —- | M] (Microsoft Corporation) MD5=86257731DDB311FBC283534CC0091634 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1196a9003b674a92\iexplore.exe

[2011/09/21 04:28:13 | 000,748,336 | —- | M] (Microsoft Corporation) MD5=904E13BA41AF2E353A32CF351CA53639 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_17a944edb4ca4c7a\iexplore.exe

[2013/05/16 20:46:47 | 000,763,544 | —- | M] (Microsoft Corporation) MD5=A1397D2A4924C390E55D146FB45FDF7C – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20600_none_0df2d8da9977d637\iexplore.exe

[2013/04/04 20:55:57 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=A1B0DEC3BB845C6369F97BC1A3542A07 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16483_none_0d15bba7809864d3\iexplore.exe

[2013/05/16 17:27:11 | 000,757,400 | —- | M] (Microsoft Corporation) MD5=A8732CEDB2C0EE7AFC08F867A47BB3EC – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20600_none_1847832ccdd89832\iexplore.exe

[2013/02/22 02:17:45 | 000,763,520 | —- | M] (Microsoft Corporation) MD5=B21A57AA4CB928059A0C0C58A9E77A02 – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20586_none_0da2595099b350a2\iexplore.exe

[2013/04/04 13:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\iexplore.exe

[2013/04/04 16:55:02 | 000,757,360 | —- | M] (Microsoft Corporation) MD5=C036AB1ED8BAC04FE4A349BA263077BB – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_17e932d8ce1ee289\iexplore.exe

[2013/04/04 19:40:37 | 000,763,504 | —- | M] (Microsoft Corporation) MD5=C4A4F4AD91677DA1659A9ADE63746B8B – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.20593_none_0d94888699be208e\iexplore.exe

[2010/11/20 22:25:08 | 000,673,040 | —- | M] (Microsoft Corporation) MD5=C613E69C3B191BB02C7A191741A1D024 – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_8.0.7601.17514_none_1beb53526fc80c8d\iexplore.exe

[2013/07/04 02:07:44 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=CEE28BCBC3251595396EE7FDA2B5F3CF – C:\Program Files (x86)\Internet Explorer\iexplore.exe

[2013/07/04 02:07:44 | 000,770,648 | —- | M] (Microsoft Corporation) MD5=CEE28BCBC3251595396EE7FDA2B5F3CF – C:\Windows\winsxs\wow64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_10.2.9200.16618_none_20d8309252a3dd93\iexplore.exe

[2011/09/21 04:28:11 | 000,754,480 | —- | M] (Microsoft Corporation) MD5=F1424C1B9B1813BF825E45DF3790BC8A – C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_9.4.8112.16421_none_0d549a9b80698a7f\iexplore.exe

< MD5 for: IEXPLORE.EXE.MUI >

[2011/09/21 04:28:12 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=17FAE936C452188D05852DE8D1082013 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_07013012b816cb66\iexplore.exe.mui

[2011/09/21 04:28:13 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=4C71CCB3C8817185E67210856778831F – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_9.4.8112.16421_en-us_1155da64ec778d61\iexplore.exe.mui

[2013/07/04 02:07:45 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files (x86)\Internet Explorer\en-US\iexplore.exe.mui

[2013/07/04 02:07:31 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Program Files\Internet Explorer\en-US\iexplore.exe.mui

[2013/07/04 02:07:31 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_103c8b6555e6a67e\iexplore.exe.mui

[2013/07/04 02:07:45 | 000,005,632 | —- | M] (Microsoft Corporation) MD5=8EDDC50FD07326E7DF9C4EEA422F0918 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_10.2.9200.16521_en-us_1a9135b78a476879\iexplore.exe.mui

[2009/07/13 21:29:20 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=C29BCFB504E33FEADDFA2D0183CEF62F – C:\Windows\winsxs\amd64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_0b433e7773148b79\iexplore.exe.mui

[2009/07/13 21:05:06 | 000,005,120 | —- | M] (Microsoft Corporation) MD5=FBA4CD95930248053A2C3F43CA70B986 – C:\Windows\winsxs\wow64_microsoft-windows-i..-optional.resources_31bf3856ad364e35_8.0.7601.17514_en-us_1597e8c9a7754d74\iexplore.exe.mui

< MD5 for: SERVICES >

[2009/06/10 16:00:26 | 000,017,463 | —- | M] () MD5=D9E1A01B480D961B7CF0509D597A92D6 – C:\Windows\winsxs\amd64_microsoft-windows-w..nfrastructure-other_31bf3856ad364e35_6.1.7600.16385_none_6079f415110c0210\services

< MD5 for: SERVICES.ASFX >

[2011/06/06 14:55:42 | 000,000,638 | —- | M] () MD5=197B3B6830C016740F873E56C3F9C9BD – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ca_ES\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,613 | —- | M] () MD5=1C7E1663AE424309CB3F78D7541BECEB – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hr_HR\Services\Services.asfx

[2011/06/06 14:55:34 | 000,000,610 | —- | M] () MD5=1F083E63820945BD3B0A1EC89DC337F3 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fi_FI\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,622 | —- | M] () MD5=227C5D88D93A46BAA21CF25428ECC9D9 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sv_SE\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,634 | —- | M] () MD5=2510B37D21D2D7451DA5B80A31D7C99C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\es_ES\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,640 | —- | M] () MD5=3D687325BB9CDD27A998D6CA1977D14A – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ro_RO\Services\Services.asfx

[2011/06/06 14:55:36 | 000,000,623 | —- | M] () MD5=52ACBF140935AA1FB30604EF26B3479C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\cs_CZ\Services\Services.asfx

[2011/06/06 14:55:36 | 000,000,614 | —- | M] () MD5=5EC6989CA1C72DC926A4A8DB4C0B440D – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pl_PL\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,620 | —- | M] () MD5=5F22C5924E86C6EE6F824DE286612180 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sl_SI\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,701 | —- | M] () MD5=5F25C1E01D5365CB9548DEFAD0DA9521 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ru_RU\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,652 | —- | M] () MD5=7008C9B2FC0E047237AFED998171E9A9 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ja_JP\Services\Services.asfx

[2011/06/06 14:55:36 | 000,000,602 | —- | M] () MD5=807E858DB39D1DADD1A7CDA0EB195902 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_CN\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,720 | —- | M] () MD5=84B28361A585B9D3A8EE54A1C30D6B11 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\uk_UA\Services\Services.asfx

[2011/06/06 14:55:36 | 000,000,606 | —- | M] () MD5=85ED839825A89D69775A00386106F9E0 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\zh_TW\Services\Services.asfx

[2011/06/06 14:55:34 | 000,000,599 | —- | M] () MD5=8CEF86FF4BBA687F844CDD2FBC9E2901 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\da_DK\Services\Services.asfx

[2011/06/06 14:55:42 | 000,000,632 | —- | M] () MD5=9FA4734C677692C2F9EF2B5277D6A66E – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\sk_SK\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,639 | —- | M] () MD5=ACB64CA3772E9660F72E9E4A6ABF595C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\fr_FR\Services\Services.asfx

[2011/06/06 14:55:34 | 000,000,662 | —- | M] () MD5=AE0C9C7B50D793C33D610A6E58C2897C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\ko_KR\Services\Services.asfx

[2011/06/06 14:55:34 | 000,000,610 | —- | M] () MD5=B9C20B8684DFBAC54EDED5B4B674CA9C – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nb_NO\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,627 | —- | M] () MD5=C25DC0D9A0098C3677CBC8AACADA1472 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\de_DE\Services\Services.asfx

[2011/06/06 14:55:38 | 000,000,628 | —- | M] () MD5=C54E7077434A62D51661295A250C8504 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\hu_HU\Services\Services.asfx

[2011/06/06 14:55:34 | 000,000,627 | —- | M] () MD5=CAFB055D206C2CBB122959A241668296 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\nl_NL\Services\Services.asfx

[2011/06/06 14:55:40 | 000,000,607 | —- | M] () MD5=CEAFFF352B8A0C30C27972EE98C34780 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\tr_TR\Services\Services.asfx

[2011/06/06 14:55:32 | 000,000,614 | —- | M] () MD5=DCAF5E14A41328B2A5976377D7DDD969 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\it_IT\Services\Services.asfx

[2011/06/06 14:55:42 | 000,000,616 | —- | M] () MD5=DED22EDA27D78427FE48AE13E566C201 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\eu_ES\Services\Services.asfx

[2010/11/15 23:02:32 | 000,000,228 | R— | M] () MD5=E09422BE0C7636A7B63A1527C4C1372D – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx

[2011/06/06 14:55:34 | 000,000,636 | —- | M] () MD5=E1EA7707C24F5A84850D5659CA376594 – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Locale\pt_BR\Services\Services.asfx

< MD5 for: SERVICES.ASFX1 >

[2010/11/15 23:02:32 | 000,000,228 | R— | M] () MD5=A7B7A4CC1A717292474115CD3A4AC121 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx1

< MD5 for: SERVICES.ASFX10 >

[2010/11/15 23:02:34 | 000,000,233 | R— | M] () MD5=3382FAB54FC906B0E40269D903A8D690 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx10

< MD5 for: SERVICES.ASFX11 >

[2010/11/15 23:02:26 | 000,000,227 | R— | M] () MD5=F36865AB3B9813962B7EDBE66FA1C28A – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx11

< MD5 for: SERVICES.ASFX12 >

[2010/11/15 23:02:30 | 000,000,225 | R— | M] () MD5=9287C7268CC0F37F1DDE18CEBB128685 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx12

< MD5 for: SERVICES.ASFX13 >

[2010/11/15 23:02:30 | 000,000,228 | R— | M] () MD5=95326C46AC2654AFF5C8543DFE22CCB3 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx13

< MD5 for: SERVICES.ASFX14 >

[2010/11/15 23:02:26 | 000,000,228 | R— | M] () MD5=14DA84ECAF57B5ADA36B9093FF04CF32 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx14

< MD5 for: SERVICES.ASFX15 >

[2010/11/15 23:02:26 | 000,000,231 | R— | M] () MD5=CF94F061685A38BABE0BBD463191EDE7 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx15

< MD5 for: SERVICES.ASFX16 >

[2010/11/15 23:02:34 | 000,000,232 | R— | M] () MD5=B6E63D87C73CED2D6B433C542C5C3965 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx16

< MD5 for: SERVICES.ASFX17 >

[2010/11/15 23:02:34 | 000,000,230 | R— | M] () MD5=545E97C4F4CEA743A8D86B685EE2EDBB – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx17

< MD5 for: SERVICES.ASFX18 >

[2010/11/15 23:02:24 | 000,000,230 | R— | M] () MD5=2577B66F38E0DEA25F328DA4A0FED322 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx18

< MD5 for: SERVICES.ASFX19 >

[2010/11/15 23:02:26 | 000,000,225 | R— | M] () MD5=0A27F1D6595A69800A43CDE155B1E4A0 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx19

< MD5 for: SERVICES.ASFX2 >

[2010/11/15 23:02:36 | 000,000,264 | R— | M] () MD5=0652D24D4E2799851A6DF1705E2BFFDA – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx2

< MD5 for: SERVICES.ASFX20 >

[2010/11/15 23:02:38 | 000,000,231 | R— | M] () MD5=C85F2519DC6AECF93F67AA613A320136 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx20

< MD5 for: SERVICES.ASFX21 >

[2010/11/15 23:02:26 | 000,000,231 | R— | M] () MD5=8C95C0528EA7049A1DFC7A7342461D75 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx21

< MD5 for: SERVICES.ASFX22 >

[2010/11/15 23:02:24 | 000,000,231 | R— | M] () MD5=9F2731666F5771CC5C1E4EEDC8FB8607 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx22

< MD5 for: SERVICES.ASFX23 >

[2010/11/15 23:02:26 | 000,000,225 | R— | M] () MD5=0E89BE53F56B22390CF61584B649CE01 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx23

< MD5 for: SERVICES.ASFX24 >

[2010/11/15 23:02:32 | 000,000,229 | R— | M] () MD5=E57594DB9B9D78AB4B53D34CAFEB8497 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx24

< MD5 for: SERVICES.ASFX25 >

[2010/11/15 23:02:36 | 000,000,232 | R— | M] () MD5=611CB9CC21D2DDAD711690671F70EF39 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx25

< MD5 for: SERVICES.ASFX3 >

[2010/11/15 23:02:34 | 000,000,229 | R— | M] () MD5=F9824728970AC8199BABDC9CBA5E038C – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx3

< MD5 for: SERVICES.ASFX4 >

[2010/11/15 23:02:26 | 000,000,226 | R— | M] () MD5=55EA57D90AE22BDF0132597EF0D7C9C7 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx4

< MD5 for: SERVICES.ASFX5 >

[2010/11/15 23:02:34 | 000,000,233 | R— | M] () MD5=846C265B751189E88B74F0155DB6B828 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx5

< MD5 for: SERVICES.ASFX6 >

[2010/11/15 23:02:36 | 000,000,231 | R— | M] () MD5=89BD37C4118540FD5AA8CDD0C24D6C0A – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx6

< MD5 for: SERVICES.ASFX7 >

[2010/11/15 23:02:34 | 000,000,245 | R— | M] () MD5=0B82FAB8FF5F988C5311DF1144A7D740 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx7

< MD5 for: SERVICES.ASFX8 >

[2010/11/15 23:02:34 | 000,000,231 | R— | M] () MD5=5226417D3C8206000A8983BDC1243075 – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx8

< MD5 for: SERVICES.ASFX9 >

[2010/11/15 23:02:30 | 000,000,234 | R— | M] () MD5=EBD8D036504F2935675F5F432F076DBA – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.asfx9

< MD5 for: SERVICES.CFG >

[2011/06/06 14:55:30 | 000,584,045 | —- | M] () MD5=B82DD53FA8C260DDD7FDC42182DB816E – C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Services\Services.cfg

[2010/11/15 23:02:22 | 000,032,633 | R— | M] () MD5=EA1C35DD541D60819D55482130BD585D – C:\Windows\Installer\$PatchCache$\Managed\68AB67CA7DA7FFFFB744AA0000000010\10.0.0\services.cfg

< MD5 for: SERVICES.EXE >

[2009/07/13 20:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\SysNative\services.exe

[2009/07/13 20:39:37 | 000,328,704 | —- | M] (Microsoft Corporation) MD5=24ACB7E5BE595468E3B9AA488B9B4FCB – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.exe

< MD5 for: SERVICES.EXE.MUI >

[2010/11/21 02:06:16 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\SysNative\en-US\services.exe.mui

[2010/11/21 02:06:16 | 000,017,408 | —- | M] (Microsoft Corporation) MD5=6507BF0DC2D1F5F32493C288EAA59277 – C:\Windows\winsxs\amd64_microsoft-windows-s..ontroller.resources_31bf3856ad364e35_6.1.7600.16385_en-us_c5f238be3fa63468\services.exe.mui

< MD5 for: SERVICES.LNK >

[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

[2009/07/13 23:54:05 | 000,001,288 | —- | M] () MD5=CA0D9F4743DFF86EBAF09D763139E958 – C:\Users\All Users\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk

< MD5 for: SERVICES.MOF >

[2009/06/10 15:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\SysNative\wbem\services.mof

[2009/06/10 15:44:06 | 000,002,866 | —- | M] () MD5=26A11C895A7F0B6D32105EBE127D8500 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\services.mof

< MD5 for: SERVICES.MSC >

[2010/11/21 02:06:14 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\en-US\services.msc

[2009/06/10 15:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysNative\services.msc

[2010/11/21 02:06:17 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\en-US\services.msc

[2009/06/10 16:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\SysWOW64\services.msc

[2010/11/21 02:06:14 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_003408aa160fce5b\services.msc

[2009/06/10 15:38:36 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\amd64_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_2b58d44b5f6beb8a\services.msc

[2010/11/21 02:06:17 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-s..cessnapin.resources_31bf3856ad364e35_6.1.7600.16385_en-us_a4156d265db25d25\services.msc

[2009/06/10 16:21:09 | 000,092,745 | —- | M] () MD5=7A1D35F59468B8118AF5B8E21DF78AE2 – C:\Windows\winsxs\x86_microsoft-windows-servicessnapin_31bf3856ad364e35_6.1.7600.16385_none_cf3a38c7a70e7a54\services.msc

< MD5 for: SERVICES.PTXML >

[2009/07/13 15:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\SysNative\wdi\perftrack\Services.ptxml

[2009/07/13 15:16:17 | 000,001,061 | —- | M] () MD5=640D7DD61B1CFA6C96F80F68F78CDFA7 – C:\Windows\winsxs\amd64_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_2b54b20ee6fa07b1\Services.ptxml

< MD5 for: WINLOGON.ADML >

[2010/11/21 02:06:30 | 000,008,013 | —- | M] () MD5=CED0EAD8D152B3D0F114698DE2316C5E – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm.resources_31bf3856ad364e35_6.1.7600.16385_en-us_f0f9032ef6930070\WinLogon.adml

< MD5 for: WINLOGON.ADMX >

[2009/06/10 16:04:41 | 000,005,237 | —- | M] () MD5=89D8F50E186A16C2CED3CF36DBBC0B2C – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-adm_31bf3856ad364e35_6.1.7600.16385_none_d7024e6992f3424d\WinLogon.admx

< MD5 for: WINLOGON.EXE >

[2010/11/20 22:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\SysNative\winlogon.exe

[2010/11/20 22:24:29 | 000,390,656 | —- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 – C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe

[2013/04/04 13:50:32 | 000,218,184 | —- | M] () MD5=B4C6E3889BB310CA7E974A04EC6E46AC – C:\Program Files (x86)\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe

< MD5 for: WINLOGON.EXE.MUI >

[2010/11/21 02:06:14 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\SysNative\en-US\winlogon.exe.mui

[2010/11/21 02:06:14 | 000,023,040 | —- | M] (Microsoft Corporation) MD5=34C7D2E30868EDAFB191341D963ABA5F – C:\Windows\winsxs\amd64_microsoft-windows-winlogon.resources_31bf3856ad364e35_6.1.7601.17514_en-us_291e96fa1ab5fc7b\winlogon.exe.mui

< MD5 for: WINLOGON.MFL >

[2010/11/21 02:06:15 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\SysNative\wbem\en-US\winlogon.mfl

[2010/11/21 02:06:15 | 000,001,080 | —- | M] () MD5=2783ED50691284F7EAE6BE9729337E1A – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof.resources_31bf3856ad364e35_6.1.7600.16385_en-us_84afd4fd38ffd276\winlogon.mfl

< MD5 for: WINLOGON.MOF >

[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\SysNative\wbem\winlogon.mof

[2009/07/13 15:30:01 | 000,003,192 | —- | M] () MD5=DF722B96F32A61783BC310FACF10240B – C:\Windows\winsxs\amd64_microsoft-windows-winlogon-mof_31bf3856ad364e35_6.1.7600.16385_none_dc2dbb778f98e40f\winlogon.mof

< %SYSTEMDRIVE%\*.* >

[2011/10/31 03:19:14 | 000,008,192 | RHS- | M] () – C:\BOOTSECT.BAK

[2014/02/26 04:25:50 | 420,368,383 | -HS- | M] () – C:\hiberfil.sys

[2014/01/16 19:35:26 | 000,000,160 | —- | M] () – C:\log.txt

[2014/02/26 04:25:50 | 1992,146,943 | -HS- | M] () – C:\pagefile.sys

[2013/03/16 15:34:37 | 306,942,510 | RHS- | M] () – C:\pcRestore.sys

< %systemroot%\Fonts\*.com >

[2009/07/14 00:32:31 | 000,026,040 | —- | M] () – C:\Windows\Fonts\GlobalMonospace.CompositeFont

[2009/07/14 00:32:31 | 000,026,489 | —- | M] () – C:\Windows\Fonts\GlobalSansSerif.CompositeFont

[2009/07/14 00:32:31 | 000,029,779 | —- | M] () – C:\Windows\Fonts\GlobalSerif.CompositeFont

[2009/07/14 00:32:31 | 000,043,318 | —- | M] () – C:\Windows\Fonts\GlobalUserInterface.CompositeFont

< %systemroot%\Fonts\*.dll >

< %systemroot%\Fonts\*.ini >

[2009/06/10 15:49:50 | 000,000,065 | —- | M] () – C:\Windows\Fonts\desktop.ini

< %systemroot%\Fonts\*.ini2 >

< %systemroot%\Fonts\*.exe >

< %systemroot%\system32\spool\prtprocs\w32x86\*.* >

< %systemroot%\REPAIR\*.bak1 >

< %systemroot%\REPAIR\*.ini >

< %systemroot%\system32\*.jpg >

< %systemroot%\*.jpg >

< %systemroot%\*.png >

< %systemroot%\*.scr >

[2011/05/13 17:42:24 | 000,302,448 | —- | M] (Microsoft Corporation) – C:\Windows\WLXPGSS.SCR

< %systemroot%\*._sy >

< %APPDATA%\Adobe\Update\*.* >

< %ALLUSERSPROFILE%\Favorites\*.* >

< %APPDATA%\Microsoft\*.* >

< %PROGRAMFILES%\*.* >

[2009/07/13 23:54:24 | 000,000,174 | -HS- | M] () – C:\Program Files (x86)\desktop.ini

< %APPDATA%\Update\*.* >

< %systemroot%\*. /mp /s >

< dir "%systemdrive%\*" /S /A:L /C >

Volume in drive C is Acer

Volume Serial Number is B4D3-6CDC

Directory of C:\

07/14/2009 12:08 AM Documents and Settings [C:\Users]

0 File(s) 0 bytes

Directory of C:\ProgramData

07/14/2009 12:08 AM Application Data [C:\ProgramData]

07/14/2009 12:08 AM Desktop [C:\Users\Public\Desktop]

07/14/2009 12:08 AM Documents [C:\Users\Public\Documents]

07/14/2009 12:08 AM Favorites [C:\Users\Public\Favorites]

07/14/2009 12:08 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

07/14/2009 12:08 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users

07/14/2009 12:08 AM All Users [C:\ProgramData]

07/14/2009 12:08 AM Default User [C:\Users\Default]

0 File(s) 0 bytes

Directory of C:\Users\All Users

07/14/2009 12:08 AM Application Data [C:\ProgramData]

07/14/2009 12:08 AM Desktop [C:\Users\Public\Desktop]

07/14/2009 12:08 AM Documents [C:\Users\Public\Documents]

07/14/2009 12:08 AM Favorites [C:\Users\Public\Favorites]

07/14/2009 12:08 AM Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu]

07/14/2009 12:08 AM Templates [C:\ProgramData\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users\Default

07/14/2009 12:08 AM Application Data [C:\Users\Default\AppData\Roaming]

07/14/2009 12:08 AM Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies]

07/14/2009 12:08 AM Local Settings [C:\Users\Default\AppData\Local]

07/14/2009 12:08 AM My Documents [C:\Users\Default\Documents]

07/14/2009 12:08 AM NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts]

07/14/2009 12:08 AM PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]

07/14/2009 12:08 AM Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent]

07/14/2009 12:08 AM SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo]

07/14/2009 12:08 AM Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu]

07/14/2009 12:08 AM Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users\Default\AppData\Local

07/14/2009 12:08 AM Application Data [C:\Users\Default\AppData\Local]

07/14/2009 12:08 AM History [C:\Users\Default\AppData\Local\Microsoft\Windows\History]

07/14/2009 12:08 AM Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files]

0 File(s) 0 bytes

Directory of C:\Users\Default\Documents

07/14/2009 12:08 AM My Music [C:\Users\Default\Music]

07/14/2009 12:08 AM My Pictures [C:\Users\Default\Pictures]

07/14/2009 12:08 AM My Videos [C:\Users\Default\Videos]

0 File(s) 0 bytes

Directory of C:\Users\E-z Rentals

03/16/2013 02:39 PM Application Data [C:\Users\E-z Rentals\AppData\Roaming]

03/16/2013 02:39 PM Cookies [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Cookies]

03/16/2013 02:39 PM Local Settings [C:\Users\E-z Rentals\AppData\Local]

03/16/2013 02:39 PM My Documents [C:\Users\E-z Rentals\Documents]

03/16/2013 02:39 PM NetHood [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Network Shortcuts]

03/16/2013 02:39 PM PrintHood [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Printer Shortcuts]

03/16/2013 02:39 PM Recent [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Recent]

03/16/2013 02:39 PM SendTo [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\SendTo]

03/16/2013 02:39 PM Start Menu [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Start Menu]

03/16/2013 02:39 PM Templates [C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Windows\Templates]

0 File(s) 0 bytes

Directory of C:\Users\E-z Rentals\AppData\Local

03/16/2013 02:39 PM Application Data [C:\Users\E-z Rentals\AppData\Local]

03/16/2013 02:39 PM History [C:\Users\E-z Rentals\AppData\Local\Microsoft\Windows\History]

03/16/2013 02:39 PM Temporary Internet Files [C:\Users\E-z Rentals\AppData\Local\Microsoft\Windows\Temporary Internet Files]

0 File(s) 0 bytes

Directory of C:\Users\E-z Rentals\Documents

03/16/2013 02:39 PM My Music [C:\Users\E-z Rentals\Music]

03/16/2013 02:39 PM My Pictures [C:\Users\E-z Rentals\Pictures]

03/16/2013 02:39 PM My Videos [C:\Users\E-z Rentals\Videos]

0 File(s) 0 bytes

Directory of C:\Users\Public\Documents

07/14/2009 12:08 AM My Music [C:\Users\Public\Music]

07/14/2009 12:08 AM My Pictures [C:\Users\Public\Pictures]

07/14/2009 12:08 AM My Videos [C:\Users\Public\Videos]

0 File(s) 0 bytes

Total Files Listed:

0 File(s) 0 bytes

50 Dir(s) 109,349,568,512 bytes free

< %systemroot%\System32\config\*.sav >

< %PROGRAMFILES%\bak. /s >

< %systemroot%\system32\bak. /s >

< %ALLUSERSPROFILE%\Start Menu\*.lnk /x >

< %systemroot%\system32\config\systemprofile\*.dat /x >

< %systemroot%\*.config >

< %systemroot%\system32\*.db >

< %PROGRAMFILES%\Internet Explorer\*.dat >

< %APPDATA%\Microsoft\Internet Explorer\Quick Launch\*.lnk /x >

[2013/05/03 11:36:43 | 000,000,221 | -HS- | M] () – C:\Users\E-z Rentals\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini

< %USERPROFILE%\Desktop\*.exe >

[2013/12/22 01:29:29 | 000,675,988 | —- | M] () – C:\Users\E-z Rentals\Desktop\Minecraft.exe

< %PROGRAMFILES%\Common Files\*.* >

< %systemroot%\*.src >

< %systemroot%\install\*.* >

< %systemroot%\system32\DLL\*.* >

< %systemroot%\system32\HelpFiles\*.* >

< %systemroot%\system32\rundll\*.* >

< %systemroot%\winn32\*.* >

< %systemroot%\Java\*.* >

< %systemroot%\system32\test\*.* >

< %systemroot%\system32\Rundll32\*.* >

< %systemroot%\AppPatch\Custom\*.* >

< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >

< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

OTL Extras logfile created on: 2/26/2014 10:50:38 AM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\E-z Rentals\Downloads

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16618)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

5.86 Gb Total Physical Memory | 3.12 Gb Available Physical Memory | 53.30% Memory free

11.71 Gb Paging File | 8.02 Gb Available in Paging File | 68.53% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 449.66 Gb Total Space | 101.97 Gb Free Space | 22.68% Space Free | Partition Type: NTFS

Computer Name: BRIGANTIA | User Name: E-z Rentals | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

.html[@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

.url[@ = InternetShortcut] – C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]

.cpl [@ = cplfile] – C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = ChromeHTML] – C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]

.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]

batfile [open] – "%1" %*

cmdfile [open] – "%1" %*

comfile [open] – "%1" %*

exefile [open] – "%1" %*

helpfile [open] – Reg Error: Key error.

htmlfile – Reg Error: Key error.

htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] – "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"

http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)

https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)

inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] – "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] – "%1" %*

regfile [merge] – Reg Error: Key error.

scrfile [config] – "%1"

scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] – "%1" /S

txtfile – Reg Error: Key error.

Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" (VideoLAN)

Directory [Browse with &IrfanView;] – "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)

Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" (VideoLAN)

Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] – Reg Error: Value error.

Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]

batfile [open] – "%1" %*

cmdfile [open] – "%1" %*

comfile [open] – "%1" %*

cplfile [cplopen] – %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] – "%1" %*

helpfile [open] – Reg Error: Key error.

htmlfile – Reg Error: Key error.

htmlfile [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] – "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"

http [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)

https [open] – "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" – "%1" (Google Inc.)

inffile [install] – %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] – "%1" %*

regfile [merge] – Reg Error: Key error.

scrfile [config] – "%1"

scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] – "%1" /S

txtfile – Reg Error: Key error.

Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" (VideoLAN)

Directory [Browse with &IrfanView;] – "C:\Program Files (x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)

Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] – "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" (VideoLAN)

Folder [open] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] – Reg Error: Value error.

Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] – "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] – Reg Error: Value error.

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

========== Authorized Applications List ==========

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0309261D-180C-4AA7-8A24-90F940DE7E25}" = rport=10243 | protocol=6 | dir=out | app=system |

"{111484F6-1E19-44DC-AA42-3514BABB4D1E}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{173B4ACC-A3D1-4E9B-A1C3-D240DF798613}" = rport=139 | protocol=6 | dir=out | app=system |

"{2190643A-16A2-4B06-AF0B-2AA3C293F230}" = lport=445 | protocol=6 | dir=in | app=system |

"{2BA84FB3-DD5D-4187-B7E1-25C56C64BBAC}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{36B22EB2-150E-4D90-93FE-64BDF27FD0DE}" = lport=10243 | protocol=6 | dir=in | app=system |

"{3E300190-9E05-460B-8FC8-C67B8E5F070A}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{40C94AC5-1935-461F-A39E-5E4DA6888A14}" = rport=445 | protocol=6 | dir=out | app=system |

"{4A5F5254-FA1B-4FFF-A3DC-97FC5473FE14}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |

"{62D2879B-EF5B-45A5-ABC7-8428D9F509B3}" = lport=138 | protocol=17 | dir=in | app=system |

"{63F96035-C91F-42F9-A1FB-98C9114A00CF}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{779F8BF0-9096-4DC9-A94D-5791B5D880CE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |

"{77C20F9E-00C0-49EC-AD4A-B0A6B5A4C7A7}" = lport=139 | protocol=6 | dir=in | app=system |

"{91FFD157-19F4-49B6-9F18-088B61B7F3BB}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{97365FAC-B53A-4097-B524-037C3C784F69}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{A0170A32-9CE5-49C3-AE17-C462889C71A4}" = rport=137 | protocol=17 | dir=out | app=system |

"{A8F31BD8-4CA3-409B-B4CC-1BE16E213BC1}" = rport=138 | protocol=17 | dir=out | app=system |

"{A98E306C-158E-42F2-A95F-E91B529E86A9}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |

"{ACC059EF-258F-4849-A3E5-2A30FA1949A9}" = lport=2869 | protocol=6 | dir=in | app=system |

"{BE80BF77-0285-4CAC-B321-C1035DA38AAA}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{C5522BF3-A628-4BF1-BB73-EDC5967DF10D}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{D12ABA29-934B-4CAF-BF0F-6F4D597D1ED8}" = lport=137 | protocol=17 | dir=in | app=system |

"{FFF8D9A9-60D5-401C-82AB-AC524B035BEC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{00E267C4-8773-45C3-BB32-F368F055BFB1}" = dir=in | app=c:\program files (x86)\common files\apple\apple application support\webkit2webprocess.exe |

"{01CB237A-55C6-45B2-A3B2-95DA8693CBEE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe |

"{02BA99D4-9A26-490E-9441-D3A3F9E82E4B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{0455E32F-102D-497D-8E2E-FC3A14C46220}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\torchlight ii\modlauncher.exe |

"{06D5E8D4-F2F1-48C0-BB9E-C0CCFB426716}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |

"{09D586D6-AC78-41DF-93A2-784FA7B78F02}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{0A058D80-0841-4BE0-A05C-AF571A42CF82}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{0A37B8FF-809A-41A2-A52F-3575484F0E70}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\clear.fi.exe |

"{0C957DAC-AE1D-4E41-8B9F-07499A7B7139}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{0F289D70-6642-499E-810E-D4FB78D8D161}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe |

"{11C45286-6A23-49C6-94AD-E1D6216E21A1}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe |

"{130793AB-2BC2-4790-AC4E-954611AE51EE}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe |

"{15629C46-7DDE-43F8-AD00-0A7FB8B0326D}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{215AF9B7-E776-4DA5-ABA6-93BD2CCDF495}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\bioware\star wars - the old republic\launcher.exe |

"{22F2285B-36A2-4166-BA6E-CCC1C9F2CF64}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe |

"{24952F51-FE48-4138-A3B4-AD90C5F60550}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\bioware\star wars - the old republic\launcher.exe |

"{2501E01A-3C8E-4C1F-A670-CBF03A5415CA}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{256859C4-8A15-4222-B1D4-F57249AD06BD}" = protocol=6 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |

"{2793BF13-75C3-4E02-B9F6-E195ABB9C03D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe |

"{27BF03B9-B4BB-4C0E-B5A2-2428F2450D21}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |

"{2C14C9ED-2771-44D1-A6D2-32B379B432F0}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe |

"{2C3BBCC7-6329-4527-AF0B-4FFF37317806}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{30A439BC-B35A-48A3-A765-22CC98CE150D}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe |

"{3226B058-129C-4155-BAA9-5E572FCCEED3}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{34180847-5297-4BFB-909F-E032EF095BE7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |

"{35BC172F-7575-4444-891C-A27CD5D03652}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\baldur's gate enhanced edition\bgee.exe |

"{367656AC-EF49-4301-8588-986D9F5CBC6E}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |

"{371BDE84-8EF3-4574-B051-7B499A294871}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |

"{382EE9A3-DA0C-4862-8C41-D5EB248D5417}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\kerbal space program\ksp.exe |

"{3AD09388-72BE-4D60-839C-A009561BCA44}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |

"{3B23D284-2072-4E10-8AC9-E441EA20EBDC}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe |

"{3C15E229-CFCD-430B-917A-4AA4FCD0AB53}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{3D15191D-A4C0-4C8A-B941-E4A5A08B1B47}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{43A2D259-A518-48C9-A9EA-7EF3C285B9F5}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |

"{45128ACE-984C-49B6-AD2B-7BA0C648C5FF}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{45C5C627-1F1E-44E0-B2A7-7D8968764080}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{460AC2B4-86D1-429A-A970-E5BEE3B95821}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\clear.fiagent.exe |

"{494FDDDF-96FD-4320-B4F9-ACDE7AD13579}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe |

"{4A7FA149-B308-4189-8222-F2D3AAA6789E}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |

"{4AC2955E-5070-4F09-9B32-9AA01F4ABC3D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{4BA539AE-05AC-4FB5-8393-8A7B69B4940F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |

"{4BCD671B-4D84-41DE-BC91-BCF8455049A2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{4CCB55BF-DD26-4434-BE6D-4FE72DD30E7C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\space pirates and zombies\spazgame.exe |

"{4DC407C6-9919-4484-99DD-9AD4FCD5177E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\fallout new vegas\falloutnvlauncher.exe |

"{4F68F906-C54C-4D7C-9D3B-E5BCD25624B1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{4F9F1894-BDBC-41D1-AC6E-A00A92EAEC7D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bleed\bleed.exe |

"{4FF68338-D240-4C11-A805-98DEF5A157D7}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe |

"{53ED3F50-69D5-4A52-A362-F9424AB39AD1}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |

"{546A2C5D-356D-4666-9447-07F2B1230465}" = protocol=17 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{54E4E1EC-2F05-4DEA-92CB-A2A627E5BAF9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\kerbal space program\ksp.exe |

"{56C35D42-57C2-45FD-A9EF-3A8C687D03AE}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe |

"{57DC06B4-B325-4A09-8470-9AA1EED1E9B9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{5E3A9A17-72A9-412A-AAA3-CE53A1968346}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe |

"{600FBC65-A13C-4094-A009-5995BC859732}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{693A0EFF-3D5B-4F07-89E5-794C22E70DF0}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe |

"{6C04B45B-19DB-4017-AB3B-986A0A787164}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |

"{6C0AAC06-5433-478D-8E1D-21EBD60606C3}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bleed\bleed.exe |

"{6E851053-C23E-4978-869D-3636D74CE354}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |

"{6FD2A3D2-57CE-4CDF-967C-8A826662B247}" = protocol=6 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe |

"{71E68D51-F25A-445F-AC3D-2C705F1492FC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\civilization iv colonization\colonization.exe |

"{724E3E18-35F6-4715-A4C4-2F0DA8B7D58B}" = dir=in | app=c:\program files (x86)\itunes\itunes.exe |

"{7791B5EC-0AB5-4B82-92B4-0B64A8FFD166}" = protocol=6 | dir=out | app=system |

"{7B42640F-0FD7-4595-A640-EE191461675D}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\torchlight ii\modlauncher.exe |

"{7B5375F9-FFB1-4B23-A410-D1B43C42C0F4}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgemca.exe |

"{7DBAE41B-02AB-4321-B9E4-3625A458D846}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bleed\bleed.exe |

"{7FC4F739-E59C-4874-95B6-9FC30574E846}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{80EBD2EE-9361-4243-8D4F-E48F498F8051}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\kerbal space program\ksp.exe |

"{810CD6DB-8E8D-4909-AA8C-9C6F65AA27BE}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ftl faster than light\ftlgame.exe |

"{871D79DD-0697-47B0-9C42-713BB4FC6B86}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |

"{8C1FB9BA-FF0B-4677-8AA9-81D9F4B6CD06}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |

"{8C24897A-455C-4D5B-9E0F-C62CAE2A0C05}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"{8C25BBF1-7CB1-4823-A99F-7E9961B32C4C}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{8E25F99B-B19F-443C-8F03-71147265269D}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\bleed\bleed.exe |

"{8E36E445-0B44-42F1-B2A2-C34F587CEFA0}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |

"{8FAA12FB-756E-48FD-912B-D124571813DF}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe |

"{92E9E8F7-DEBB-4043-9A6A-E600D98811DD}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\kernel\dmr\dmrengine.exe |

"{9384C357-64E3-4935-8482-6D1F98F848FF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{954281E8-9925-4DF5-BC30-FB2A589CA59D}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{9558781A-8D1B-4C70-82B8-79CAF8791F3F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{96FBEF54-4B88-44E2-9D22-CD18DCCD46F0}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\kernel\clml\clmlsvc.exe |

"{9857FD3A-9DF4-45CD-9B91-E614D092ACFA}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe |

"{989A1CA1-A236-49E0-93DE-F6162CCED6F1}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2514\agent.exe |

"{9972372D-A7B3-41BA-869B-6511A781EBA3}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{9BAA9B0F-91CE-42C2-B227-729BCE5598E5}" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\bioware\star wars - the old republic\launcher.exe |

"{9EC3A930-EFA8-4C89-9FFB-4BC751CF6788}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\kernel\dmr\dmrengine.exe |

"{9F338820-EC81-4E7E-BD6C-7E44255CC341}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgnsa.exe |

"{A0F572DE-B02F-4B51-92F9-75120E1B9F89}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |

"{A1AC4D08-AE46-4057-986B-6FF177E6287F}" = protocol=17 | dir=in | app=c:\users\e-z rentals\appdata\roaming\bittorrent\bittorrent.exe |

"{A42539BB-6468-47DA-AD77-8E2A13CAC998}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe |

"{A71A0DA5-AB9F-41DD-BF44-58E377643884}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{ACF22C74-F8D4-4336-A89A-3713271AF556}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{ADA62837-5AE2-4794-8B5A-D2C0BAF1FD24}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"{AEF332A2-2D70-427E-9FC6-DD1C44175937}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |

"{B34D96F6-6FA2-4C14-BEBE-D425614BD4E7}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\longlivethequeen\longlivethequeen.exe |

"{B382571C-B944-4037-AFBF-195E983F708E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\ftl faster than light\ftlgame.exe |

"{B556BA03-5116-4960-9547-C29F51FE53E2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe |

"{B650F89E-B49A-489A-93C1-5DB6A41D3DDC}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\universe sandbox\universe sandbox.exe |

"{BBB0EC0C-2395-4846-B690-2ED17300974C}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgdiagex.exe |

"{BF5B3A69-5AEC-44C5-8AAC-5F9A5E97FB03}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |

"{C0DFC454-2C60-45AB-AC41-D325E48B90F2}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\dota 2 beta\dota.exe |

"{C0DFF001-D5B4-4AED-8710-F5BE1C6BD915}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\kerbal space program\ksp.exe |

"{C1D24CED-AD2C-4F97-B50F-7D84880C00EC}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe |

"{C2DCD966-7862-4122-86AB-C2AE5C6C1AB2}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe |

"{C701280C-0D43-43A0-A2E0-2A53426E01F1}" = protocol=17 | dir=in | app=c:\program files (x86)\avg\avg2013\avgmfapx.exe |

"{C79BE067-1E09-4E7B-A5AA-3256666A727F}" = protocol=6 | dir=in | app=c:\users\e-z rentals\appdata\roaming\bittorrent\bittorrent.exe |

"{C7C4C1FF-FA5C-447F-B218-8ABE726E6D04}" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\bioware\star wars - the old republic\launcher.exe |

"{C9FC10D0-232A-49C4-B88A-535451B92425}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\baldur's gate enhanced edition\bgee.exe |

"{CA759BFB-CF59-47E8-A8AC-BDF2A947D722}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\sid meier's civilization v\launcher.exe |

"{CF894CFE-E91F-4F5A-B217-1AD397C3DBA8}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |

"{D09A8C6E-4E7C-46C6-BE56-D54CA59E6D8B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the stanley parable\stanley.exe |

"{D173EB2C-059A-4DBA-8B68-AD8510068996}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\longlivethequeen\longlivethequeen.exe |

"{D1AE0DE1-0E4C-4576-8A16-5BF132AF2E33}" = protocol=17 | dir=in | app=c:\program files (x86)\ventrilo\ventrilo.exe |

"{D1CD5DB1-8D32-4A76-A2D0-476AACE5C2E4}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe |

"{D4640FE6-A344-4F0D-A447-C87C244E21E0}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\civilization iv colonization\colonization.exe |

"{D4C2BCFB-013B-4F77-94A6-11D44379DB4D}" = dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{D5BA233F-1537-4FA6-B3BC-199AEDA4A52F}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\space pirates and zombies\spazgame.exe |

"{D948F794-EE58-4CAE-B141-BCFCCCB04991}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{DAA3AF3D-AFC0-45AB-BFC7-697BC38AD524}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{DAA6ED58-7067-4417-A639-1C8EC7C9CA63}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{E3193B85-95D8-4570-B30A-201BA296041F}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |

"{E40A88DA-1AAE-4062-9890-E7D1B630A53F}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the binding of isaac\isaac.exe |

"{E94C1018-42FF-4FBE-A884-FD7BC1FF0EEA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\the binding of isaac\isaac.exe |

"{EAF13222-7046-4FF5-AB78-207A6F704900}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |

"{EC48C5C7-7FB7-4782-A352-82C8E94C80C6}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe |

"{EE473F54-FC0C-4CDC-8CAC-D8DE2039B67B}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |

"{EF733833-F386-47C2-B57A-87E7305B7719}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |

"{EFA6CB86-5EB5-4544-AFB6-611D74C7460F}" = protocol=6 | dir=in | app=c:\program files (x86)\ventrilo\ventrilo.exe |

"{F035895D-796F-4ADF-A412-EC3958B013DC}" = protocol=6 | dir=in | app=c:\program files (x86)\pando networks\media booster\pmb.exe |

"{F75D62CC-53C5-46BA-9205-7AE43A138906}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{F82831BA-B89D-482D-AF0B-FCFBEFA978F1}" = dir=in | app=c:\program files (x86)\acer\clear.fi\mvp\kernel\dmr\dmrengine.exe |

"{F9474848-57C3-4202-A23B-D03929579A51}" = protocol=17 | dir=in | app=c:\program files (x86)\diablo iii\diablo iii.exe |

"{F9EE1C1C-E191-4689-9CFF-FF128EE2C164}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\rogue legacy\roguelegacy.exe |

"{F9EF3E38-1BB7-4D5F-A0BE-2FE593347E7F}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |

"{FBA8FEF1-5859-4C66-A0F6-35AB895F4E6E}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\terraria\terraria.exe |

"{FD9CE578-B7CE-48B2-90B5-4E56EC8845C3}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe |

"{FF50BF90-D023-450B-88BF-22B645E2EDAD}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe |

"TCP Query User{312250AA-AAE8-48A9-A1E6-86739A190857}C:\program files (x86)\steam\steam.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"TCP Query User{60518E85-0ABF-468C-8347-3CA8AA092473}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe" = protocol=6 | dir=in | app=c:\users\public\games\cryptic studios\star trek online\live\gameclient.exe |

"TCP Query User{67ECE0A1-0787-4262-A780-DA5A289D1AED}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |

"TCP Query User{71077068-3CFF-40FB-94F7-2337BA02E6A9}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe |

"TCP Query User{F370F578-20AD-4D54-A070-845BC8E4B02A}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe" = protocol=6 | dir=in | app=c:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe |

"UDP Query User{B3B326CC-C3C2-4146-A297-265CBE02B7D0}C:\program files (x86)\guild wars 2\gw2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\guild wars 2\gw2.exe |

"UDP Query User{B465AB9D-4306-49D2-B98C-C29FDA695341}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\binaries\win32\xcomgame.exe |

"UDP Query User{C3DE089F-C330-4E18-82BB-C2B038C9B21B}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe" = protocol=17 | dir=in | app=c:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe |

"UDP Query User{E567BA81-B019-401D-9033-9903BF1DA5E3}C:\program files (x86)\steam\steam.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |

"UDP Query User{E6689D0C-9D5E-470C-A30E-F2957585FE82}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe" = protocol=17 | dir=in | app=c:\users\public\games\cryptic studios\star trek online\live\gameclient.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}" = MyWinLocker

"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector

"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

"{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}" = Shredder

"{21B133D6-5979-47F0-BE1C-F6A6B304693F}" = Visual Studio 2010 x64 Redistributables

"{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition)

"{2EF5D87E-B7BD-458F-8428-E4D0B8B4E65C}" = Apple Mobile Device Support

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{5E2CD4FB-4538-4831-8176-05D653C3E6D4}" = Windows Live Remote Service Resources

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{656DEEDE-F6AC-47CA-A568-A1B4E34B5760}" = Windows Live Remote Service Resources

"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}" = Bonjour

"{774088D4-0777-4D78-904D-E435B318F5D2}" = Microsoft Antimalware

"{847B0532-55E3-4AAF-8D7B-E3A1A7CD17E5}" = Windows Live Remote Client Resources

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended

"{90140000-006D-0409-1000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010

"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9A853BA3-28A2-99D5-B125-75891A08D26A}" = ccc-utility64

"{A535111D-95C8-487F-869E-CE4C239972D2}" = iTunes

"{AB3AFCA5-A2BB-4F31-8FEC-0295DB7BF928}" = AVG 2013

"{B750FA38-7AB0-42CB-ACBB-E7DBE9FF603F}" = Windows Live Remote Client Resources

"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Intel(R) Turbo Boost Technology Monitor 2.0

"{CD95F661-A5C4-44F5-A6AA-ECDD91C240D9}" = WinZip 17.0

"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter

"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client

"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service

"{E77543EE-6FB5-4FF6-AB70-635392C8C756}" = Microsoft Security Client

"{EA4954FD-C685-1C7D-16F3-9BC2FD5E6BD3}" = AMD Catalyst Install Manager

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"{F71946E2-5B8E-4AB2-A4FE-73FE12B2F2AC}" = AVG 2013

"AVG" = AVG 2013

"CCleaner" = CCleaner

"Defraggler" = Defraggler

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"SynTPDeinstKey" = Synaptics Pointing Device Driver

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{05E379CC-F626-4E7D-8354-463865B303BF}" = Windows Live UX Platform Language Pack

"{0A81E705-4FF9-DC83-302D-50F3B847F77B}" = CCC Help Polish

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Backup Manager V3

"{14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C}" = clear.fi

"{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite

"{19BA08F7-C728-469C-8A35-BFBD3633BE08}" = Windows Live Movie Maker

"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = clear.fi

"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java(TM) 6 Update 29

"{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}" = Evernote v. 4.5.1

"{2A3FC24C-6EC0-4519-A52B-FDA4EA9B2D24}" = Windows Live Messenger

"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App

"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver

"{314F6B36-C0B5-E70A-A8DC-E1A126552409}" = CCC Help Korean

"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery

"{34319F1F-7CF2-4CC9-B357-1AE7D2FF3AC5}" = Windows Live

"{34F4D9A4-42C2-4348-BEF4-E553C84549E7}" = Windows Live Photo Gallery

"{39F15B50-A977-4CA6-B1C3-6A8724CDA025}" = MyWinLocker 4

"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic

"{3B9A92DA-6374-4872-B646-253F18624D5F}" = Windows Live Writer

"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management

"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology

"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup

"{42B25C20-2D3F-BEE2-3627-B13CC30BDB38}" = CCC Help Hungarian

"{43AAE145-83CF-4C96-9A5E-756CEFCE879F}" = clear.fi Client

"{46F044A5-CE8B-4196-984E-5BD6525E361D}" = Apple Application Support

"{479F7070-9F87-4A05-E1C3-E9B8781F75B3}" = CCC Help Czech

"{488F0347-C4A7-4374-91A7-30818BEDA710}" = Galerie de photos Windows Live

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4A2AFE1D-59B9-0300-0052-21BA66BB2FF5}" = CCC Help Dutch

"{4C90AC57-A494-7E1A-57A6-6B53167BDC3C}" = CCC Help Chinese Standard

"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11

"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver

"{546DB8EB-CA28-144F-AB99-1EE2D6A47342}" = CCC Help Japanese

"{579684A4-DDD5-4CA3-9EA8-7BE7D9593DB4}" = Windows Live UX Platform Language Pack

"{57CA189D-BAEB-49BC-AE75-CE70E9B775E1}" = Catalyst Control Center - Branding

"{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso

"{62687B11-58B5-4A18-9BC3-9DF4CE03F194}" = Windows Live Writer Resources

"{63A137AC-FD79-7A5E-3CD5-5605F74AB9E0}" = CCC Help Swedish

"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{6DEC8BD5-7574-47FA-B080-492BBBE2FEA3}" = Windows Live Movie Maker

"{6F9B77F8-DF26-DB18-98B6-171225AA0CDD}" = CCC Help Thai

"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer" = WildTangent Games App (Acer Games)

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable

"{74257E77-412D-ACF4-C279-82936D687083}" = CCC Help Russian

"{768C6D38-F6B8-F35C-1D4E-CE764B85B178}" = CCC Help Italian

"{789289CA-F73A-4A16-A331-54D498CE069F}" = Ventrilo Client

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{79BF4901-1EC4-4726-B3C2-A7859706C6E7}" = League of Legends

"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management

"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform

"{841F1FB4-FDF8-461C-A496-3E1CFD84C0B5}" = Windows Live Mesh

"{87DDB284-DB4B-FC20-B78E-A66B008132BD}" = Catalyst Control Center Profiles Mobile

"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher

"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime

"{8D68CE08-9A14-4B7B-9857-3C646A2F34C7}" = Fooz Kids Platform

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{90140011-0066-0409-0000-0000000FF1CE}" = Microsoft Office Starter 2010 - English

"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker

"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010

"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader

"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster

"{9838502B-CB01-F07C-355E-6A99B472AF6F}" = CCC Help Spanish

"{9958978D-994A-06A7-F34F-1E8276A78754}" = CCC Help Chinese Traditional

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail

"{9FAE6E8D-E686-49F5-A574-0A58DFD9580C}" = Windows Live Mail

"{A0C91188-C88F-4E86-93E6-CD7C9A266649}" = Windows Live Mesh

"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A9AF76B6-CC38-F234-FE9B-670439204BDA}" = CCC Help Danish

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AA36E9DD-AFB7-E41D-21B6-E042E72FBC50}" = CCC Help Finnish

"{AA6BB7D8-CD01-01CF-6380-98F856E505BD}" = CCC Help French

"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer

"{AAF454FC-82CA-4F29-AB31-6A109485E76E}" = Windows Live Writer

"{AB61A2E9-37D3-485D-9085-19FBDF8CEF4A}" = Windows Live Messenger

"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.0) MUI

"{B4B6C5E2-7341-DEC2-75DD-DE3C5C885B50}" = CCC Help Norwegian

"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime

"{B906C11A-D193-4143-9FA7-E2EE8A5A8F21}" = clear.fi

"{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}" = Dolby Advanced Audio v2

"{BB285C9F-C821-4770-8970-56C4AB52C87E}" = Skype Click to Call

"{C2695E83-CF1D-43D1-84FE-B3BEC561012A}" = Shredder

"{C66824E4-CBB3-4851-BB3F-E8CFD6350923}" = Windows Live Mail

"{C68FF4E9-C858-14E1-27B2-BEB8C3982FBA}" = Catalyst Control Center InstallProxy

"{C7ECA0F4-805E-358E-09EA-DF586A547EB1}" = CCC Help German

"{C893D8C0-1BA0-4517-B11C-E89B65E72F70}" = Windows Live Photo Common

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64

"{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}" = NTI Media Maker 9

"{D3E5A972-9A15-427D-AE78-8181A5FD943C}" = eBay Worldwide

"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{D4E0052F-D2F6-CC47-216E-0F98AA3D02FD}" = CCC Help English

"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh

"{DDC8BDEE-DCAC-404D-8257-3E8D4B782467}" = Windows Live Writer Resources

"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh

"{E0955568-4353-4C85-8988-285A8C0F5E87}" = Mumble 1.2.4

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E3201FB8-4969-30D4-EFC2-B153EAEA6487}" = Catalyst Control Center

"{E362724E-9320-4946-AF34-874E7B6B2927}" = System Requirements Lab CYRI

"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger

"{E87022D3-C8C9-4C76-8E27-BC7F18F9B8FB}" = Google Drive

"{EBE4F079-3395-110E-CC67-E1826AA32934}" = CCC Help Turkish

"{ED0D8922-7F6C-2B5C-A09A-3FE459E4DDB1}" = CCC Help Greek

"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Acer Updater

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Display Audio Driver

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F8D6C194-6F77-F864-18E2-6EFF3BD6A18D}" = Catalyst Control Center Localization All

"{FCA8077C-65B4-0F40-5BCF-8CACC67899AF}" = CCC Help Portuguese

"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR

"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials

"{FE9A8A35-DBD4-9D26-84A2-CFF68BEFAAB6}" = PX Profile Update

"7-Zip" = 7-Zip 9.20

"Acer Registration" = Acer Registration

"Acer Screensaver" = Acer ScreenSaver

"Acer Welcome Center" = Welcome Center

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 12 ActiveX

"Battle.net" = Battle.net

"BitTorrent" = BitTorrent

"Diablo III" = Diablo III

"Google Chrome" = Google Chrome

"Guild Wars 2" = Guild Wars 2

"Hearthstone" = Hearthstone

"Identity Card" = Identity Card

"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = Acer Crystal Eye Webcam

"InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Acer Backup Manager

"InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}" = MyWinLocker Suite

"InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = clear.fi

"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver

"InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}" = newsXpresso

"InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}" = NTI Media Maker 9

"IrfanView" = IrfanView (remove only)

"League of Legends 3.0.0" = League of Legends

"LManager" = Launch Manager

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300

"NCLauncher_NCWest" = NCSOFT Game Launcher

"Office14.Click2Run" = Microsoft Office Click-to-Run 2010

"OpenAL" = OpenAL

"Star Trek Online" = Star Trek Online

"Steam App 105600" = Terraria

"Steam App 107200" = Space Pirates and Zombies

"Steam App 113200" = The Binding of Isaac

"Steam App 16810" = Sid Meier's Civilization IV: Colonization

"Steam App 200510" = XCOM: Enemy Unknown

"Steam App 200710" = Torchlight II

"Steam App 211820" = Starbound

"Steam App 212680" = FTL: Faster Than Light

"Steam App 220200" = Kerbal Space Program

"Steam App 221910" = The Stanley Parable

"Steam App 22380" = Fallout: New Vegas

"Steam App 228280" = Baldur's Gate: Enhanced Edition

"Steam App 239800" = Bleed

"Steam App 241600" = Rogue Legacy

"Steam App 251990" = Long Live The Queen

"Steam App 440" = Team Fortress 2

"Steam App 570" = Dota 2

"Steam App 72200" = Universe Sandbox

"Steam App 8930" = Sid Meier's Civilization V

"UnHackMe_is1" = UnHackMe 7.10 release

"VLC media player" = VLC media player 2.1.2

"WildTangent acer Master Uninstall" = Acer Games

"WinLiveSuite" = Windows Live Essentials

"WinX DVD Ripper_is1" = WinX DVD Ripper 5.5.11

"World of Warcraft" = World of Warcraft

"WTA-0165a2fe-643e-4adb-8a40-3ff051ad56b9" = Final Drive: Nitro

"WTA-0f7fb941-7247-4995-804f-d055dcbf2864" = FATE: The Cursed King

"WTA-13b01172-5e5b-4510-af95-dd9b3bdf4581" = Cradle of Rome 2

"WTA-358ba17a-52bb-4593-8b7c-59913deba3f7" = Virtual Villagers 5 - New Believers

"WTA-4254cc3f-4d63-404f-aef9-7d6e920a69ca" = Penguins!

"WTA-5c950340-e3e3-43b2-a38b-84284cc8b799" = Chuzzle Deluxe

"WTA-6b19f984-00a3-45f3-83f4-60b5ee3745e9" = Dora's World Adventure

"WTA-87f8f3c6-a6f0-4086-bd9e-82681cd31512" = Governor of Poker 2 Premium Edition

"WTA-92dac42e-f44c-47c4-b1c5-48296fd7412e" = Plants vs. Zombies - Game of the Year

"WTA-93edb750-f11d-4cd8-bdec-2be6897e9bcd" = Zuma's Revenge

"WTA-9823d767-8b38-4f38-ac9c-b6ab41481110" = Bejeweled 2 Deluxe

"WTA-a1de4ac1-b952-4207-9e7c-43cc2d24fdcb" = Polar Bowler

"WTA-af7ce482-68f3-476e-a568-dfd7add8969e" = Mystery of Mortlake Mansion

"WTA-b8efffa9-d4b5-4c67-80dd-40cc8a204796" = Build-a-lot 4 - Power Source

"WTA-bc88f54d-6ceb-4f24-a96d-73ba6d8afe6a" = Jewel Match 3

"WTA-c16061fb-32d3-4773-9f7d-7e38c90864d0" = Polar Golfer

"WTA-c39d8e35-5ac4-4673-9449-398e449a7097" = Agatha Christie - Death on the Nile

"WTA-e3b365ca-e427-44d1-9a92-1f4db430021b" = Torchlight

"WTA-f449bb29-a093-4236-aa91-8d1e1d9c34bf" = Chronicles of Albian

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"101a9f93b8f0bb6f" = Curse Client

"UnityWebPlayer" = Unity Web Player

========== Last 20 Event Log Errors ==========

[ Application Events ]

Error - 2/22/2014 1:54:31 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 2927016

Error - 2/22/2014 1:54:31 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 2927016

Error - 2/22/2014 1:54:32 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/22/2014 1:54:32 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 2928030

Error - 2/22/2014 1:54:32 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 2928030

Error - 2/22/2014 1:54:33 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/22/2014 1:54:33 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 2929028

Error - 2/22/2014 1:54:33 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledSPRetry 2929028

Error - 2/22/2014 1:54:34 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: Continuously busy for more than a second

Error - 2/22/2014 1:54:34 PM | Computer Name = Brigantia | Source = Bonjour Service | ID = 100

Description = Task Scheduling Error: m->NextScheduledEvent 2930042

[ System Events ]

Error - 2/21/2014 8:11:53 PM | Computer Name = Brigantia | Source = Service Control Manager | ID = 7009

Description = A timeout was reached (30000 milliseconds) while waiting for the Microsoft.NET