Archief - PC blijft regelmatig hangen

Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
S

Svenvdb

Legacy Member
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:45:40, on 3/06/2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
C:\Program Files (x86)\WhatPulse\WhatPulse.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe
C:\Program Files (x86)\PDFCreator\PDFCreator.exe
C:\Users\Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\2.5.0.0\LightShot.exe
C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe
C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files (x86)\Mindjet\MindManager 8\MmReminderService.exe
C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe
C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
C:\Program Files (x86)\TightVNC\tvnserver.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
C:\Program Files (x86)\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe
C:\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN !
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN | Hotmail | Messenger | Nieuws, sport, entertainment, video, lifestyle, auto en nog veel meer, dat is MSN !
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: CmjBrowserHelperObject Object - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll
O2 - BHO: PDFCreator Toolbar Helper - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Microsoft Web Test Recorder 10.0 Helper - {DDA57003-0068-4ed2-9D32-4D1EC707D94D} - C:\Program Files (x86)\Microsoft Visual Studio 10.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll
O2 - BHO: Google Gears Helper - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: PDFCreator Toolbar - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Adobe_ID0ENQBO] C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [MMReminderService] C:\Program Files (x86)\Mindjet\MindManager 8\MMReminderService.exe
O4 - HKLM\..\Run: [beid] "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup
O4 - HKLM\..\Run: [USBestCR] "C:\Program Files (x86)\Sitecom MD-020 SIM Editor\iconcs59995379.exe" RunFromReg
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [googletalk] "C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart
O4 - HKLM\..\Run: [PlusService] "C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files (x86)\TightVNC\tvnserver.exe" -controlservice -slave
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/nl.special-uninstallation-feedback-appf?lic=OQBBAFYARgBSAEUARQAtAFYAMgBHADMASwAtADgANwBXAFUAVQAtADIAVABWAEgAQQAtAFgANgBEAEYAOAAtAEwANgBQAEEATgA"&"inst=NwA3AC0ANwAyADQAMQA1ADIAMwAyADEALQBCAEEAUgA5AEcAKwAxAC0ARgBMACsAOQAtAFgATwAzADYAKwAxAC0ARgA5AE0ANwBDACsAMgAtAFgATwA5ACsAMQAtAEMASQBQACsAMgAtAEQARABUACsAMwA2ADEAOQA4AC0ARABEADkAMABGACsAMQAtAFMAVAA5ADAARgBBAFAAUAArADEALQBTADkAMABGAEQARABGACsAMQAtAEYAOQAwAE0AMQAyAEUAVAArADEALQBUAEIATgArADEALQBVADkANQArADEALQBMADkAMABNAEoAKwAxAC0ARgA5ADAATQAxADIASgBOACsAMQA"&"prod=90"&"ver=9.0.894
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files (x86)\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [WhatPulse] C:\Program Files (x86)\WhatPulse\WhatPulse.exe
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\Sven Van den brande\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [LightShot] C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
O4 - HKCU\..\Run: [F1AE261EF7F4339179518E43C4194C3B17ACFB6D._service_run] "C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\chrome.exe" --type=service
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [ExtremeSync Background Scheduler] "C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe" /TIMERASAPP /STARTUP
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: Check for TWS Updates.lnk = C:\Jts\WiseUpdt.exe
O4 - Startup: Dropbox.lnk = Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: PDFCreator.lnk = C:\Program Files (x86)\PDFCreator\PDFCreator.exe
O4 - Global Startup: UltraMon.lnk = ?
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: (no name) - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra 'Tools' menuitem: &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - c:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Send to Mindjet MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - c:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra 'Tools' menuitem: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files (x86)\Fiddler2\Fiddler.exe" (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: Demos: UI Controls and Frameworks | DevExpress
O15 - Trusted Zone: default
O15 - Trusted Zone: Runaware
O17 - HKLM\System\CCS\Services\Tcpip\..\{E6E22FB3-DC26-4E64-A849-F07E24DD9473}: NameServer = 192.168.1.1
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Afa Card Reader Service (AfaService) - Unknown owner - C:\Windows\system32\afasrv64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apache2.2 - Unknown owner - C:\xampp\apache\bin\httpd.exe (file missing)
O23 - Service: Application Driver Auto Removal Service (01) (appdrvrem01) - Unknown owner - C:\Windows\System32\appdrvrem01.exe (file missing)
O23 - Service: DA Remote Management Maintenance Service (DAMaint) - ScriptLogic Corporation - C:\Program Files (x86)\RemoteSupportManager\DaMaint.exe
O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)
O23 - Service: EaseUS Agent - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
O23 - Service: Extreme VSS Service (ExtremeVSSService) - Super Flexible Software Ltd. & Co. KG - C:\Program Files (x86)\SuperFlexible\ExtremeVSS.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: Google Updateservice (gupdate1c98eeedccd4e23) (gupdate1c98eeedccd4e23) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVCSer64.exe
O23 - Service: Process Monitor (LVPrcS64) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: mental ray 3.8 Satellite for Autodesk 3ds Max 2011 64-bit 64-bit (mi-raysat_3dsmax2011_64) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - c:\xampp\mysql\bin\mysqld.exe (file missing)
O23 - Service: MySQL_ZendServer51 - Unknown owner - C:\Program.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Remote Support Manager (RemoteSupportManager) - ScriptLogic Corporation - C:\Program Files (x86)\RemoteSupportManager\DesktopAuthority.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files (x86)\WinPcap\rpcapd.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: Server Impulse Agent Service - Server Impulse - C:\Program Files (x86)\Server Impulse Agent\AgentService.exe
O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Program Files (x86)\TightVNC\tvnserver.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.21\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 19926 bytes
S

Satkan

Legacy Member
Makkelijkste is doorgaans gewoon windows herinstalleren, en alles formateren.
Probeer anders ook eens het gebruikelijke,
Ccleaner, en defragmenteren etc...

Kom daarna nog eens terug als het probleem zich nog voordoet.
J

Juisterr

Legacy Member
Wat een advies Satkan ? Daar kan Svenvdb toch helemaal niks mee ?

@Svenvdb
Heb je toevallig iets geinstalleerd of juist verwijderd recent?


Download OTL naar je Bureaublad
  • Dubbelklik op OTL.com om het programma te openen. Zorg ervoor dat all andere vensters gesloten zijn, en laat het programma ongestoord zijn werk doen.
  • Zet een vinkje bij Scan All Users.
  • Klik op de knop Quick Scan. Verander de instellingen van OTL niet, tenzij ik je hiervoor specifiek instructies geef. De scan zal niet heel erg lang duren.
    • Er zullen twee Kladblok-vensters geopend worden wanneer de scan klaar is. OTL.Txt en Extras.Txt. Deze bestanden zijn opgeslagen in dezelfde locatie als OTL.
    • Kopieer (Bewerken->Alles selecteren, Bewerken->Kopiëren) en plak (Bewerken->Alles selecteren, Bewerken->Plakken) de inhoud van deze twee bestanden één voor één in je volgende bericht.
S

Svenvdb

Legacy Member
Extra Deel 1:

OTL Extras logfile created on: 3/06/2012 23:18:28 - Run 1
OTL by OldTimer - Version 3.2.46.0 Folder = C:\Users\Sven Van den brande\Desktop
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

4,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 35,31% Memory free
8,19 Gb Paging File | 3,75 Gb Available in Paging File | 45,78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 54,20 Gb Free Space | 11,64% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 89,37 Gb Free Space | 19,19% Space Free | Partition Type: NTFS
Drive W: | 4625,64 Gb Total Space | 1055,50 Gb Free Space | 22,82% Space Free | Partition Type: NTFS
Drive Z: | 929,46 Gb Total Space | 84,31 Gb Free Space | 9,07% Space Free | Partition Type: NTFS

Computer Name: HOOFDPC | User Name: Sven Van den brande | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OpenAsAWebSite] -- C:\Program Files (x86)\Microsoft WebMatrix\WebMatrix.exe #ExecuteCommand# SiteFromFolder %L (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Xinorbis3] -- "C:\Program Files (x86)\freshney.org\Xinorbis3\Xinorbis3.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OpenAsAWebSite] -- C:\Program Files (x86)\Microsoft WebMatrix\WebMatrix.exe #ExecuteCommand# SiteFromFolder %L (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Xinorbis3] -- "C:\Program Files (x86)\freshney.org\Xinorbis3\Xinorbis3.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = F2 A0 36 9A EE 9F C8 01 [binary data]
"VistaSp2" = 49 2F 9F E3 DD 44 CA 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03EBF445-60B7-4DF6-9CC2-B33F8A11B0B9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0408DD07-FA81-462E-A12D-C2E47E449ED4}" = lport=10243 | protocol=6 | dir=in | app=system |
"{09A03F37-85E1-489B-B086-3787B9A09E15}" = lport=50900 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{0D020845-B8AF-403E-ADCA-ED862DB5870C}" = rport=10243 | protocol=6 | dir=out | app=system |
"{17FD6234-FAB0-4DCD-A622-86FB7432AE13}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{1F3285F9-C03F-4F2E-9BAC-C076D2268B49}" = lport=10300 | protocol=6 | dir=in | app=c:\program files (x86)\devolo\informer\devinf.exe |
"{22E8B288-ECDE-4445-9DFC-E65129314141}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{26288E5A-4F61-4266-B3C5-E49C4FCE1F96}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2E376C74-5055-45E8-8B6C-E45663D1C4DB}" = lport=4500 | protocol=17 | dir=in | name=ipsec (ike nat-t) |
"{37E67397-7A52-4028-8FA8-5CC9BCB16D2B}" = lport=51001 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{3810C291-40BF-4E48-AB5D-3F20ED6CDAD9}" = lport=135 | protocol=6 | dir=in | name=rpc endpoint mapper and dcom infrastructure |
"{38A084E3-6B64-471B-BB29-0CF63B92F78F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3E908D87-08E6-4BEE-925D-95BE8679E8BD}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{4DC5BDE8-D86D-4B26-B32E-1224784BCDF6}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{532AE015-D973-4FC4-ABC1-2C8DBFBFA9F0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{5A67ABEB-167F-412D-9FFB-BA7046E7B891}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{6826B9BE-E004-4463-9FB6-A6EAC49FE797}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6ACECF83-1E60-42A3-9263-94B3DD915DBF}" = lport=51000 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{6E179584-AA04-4897-8004-2FC87CD956B3}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{7513D8A8-E803-4E73-B29E-3506793A1115}" = lport=2869 | protocol=6 | dir=in | app=system |
"{80FC61C2-5025-441E-9CF3-9C9877564821}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{847B2304-6C1A-431E-A777-C0985EF084DA}" = lport=2799 | protocol=17 | dir=in | name=altova license metering port (udp) |
"{98759E8C-0E4A-44B7-ADC5-85C8A1F627B2}" = lport=50901 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{9F6DF86F-9958-4A3D-9EBC-D971EA83F86F}" = lport=500 | protocol=17 | dir=in | name=ipsec (ike) |
"{A42CFF81-94C1-47E3-BD45-62954552B388}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{AAA118F5-B949-4E4E-95B4-CEAFED152FCE}" = lport=5900 | protocol=6 | dir=in | name=vnc5900 |
"{CC2FA554-A295-40CC-AB16-9F08C6D1CEC9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D5EA0770-B402-4D00-84A7-E3463DE87372}" = lport=2799 | protocol=6 | dir=in | name=altova license metering port (tcp) |
"{DFC8586A-0AD2-481F-962F-692BF08875E6}" = lport=5800 | protocol=6 | dir=in | name=vnc5800 |
"{E13EC772-0F0C-417D-A75E-C886154DD28C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{E6591E1F-F62E-4212-B788-E28FDF159BD0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{ECF705F9-0D77-449C-BF9C-47EF3ECADED2}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{FB0F1FD2-C1CE-4471-9645-3AD617504423}" = lport=10301 | protocol=17 | dir=in | app=c:\program files (x86)\devolo\informer\devinf.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{008840C1-23FA-421D-8D91-154932BA41A2}" = protocol=6 | dir=in | app=c:\games\farming simulator 2011\farmingsimulator2011.exe |
"{013F6725-D241-4D75-B7CA-FEADED1E8173}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe |
"{020B2A0D-9E0E-4D64-9F21-93B8370AB7DC}" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\tvnserver.exe |
"{023796D8-12F1-42FB-98A3-52BE9F31A128}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{02A392C5-3A8B-4887-B23B-CF12DDBC6916}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{074E1F74-EC4B-47EB-A4C3-B593F2AEBB08}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{096430D3-5A18-40BB-B845-6846F1979A42}" = protocol=6 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{0DA3433E-4675-4498-BC8B-3FBBE9A2B06A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{0E9EC003-1650-47EF-A262-AB6805406203}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe |
"{0EE6A3A3-2A2A-4D68-9BE2-14667E562E38}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe |
"{0EFCE28D-2B22-4BE9-860C-9AE364698000}" = protocol=6 | dir=in | app=c:\program files (x86)\cyanide\gamecenter\gamecenter.exe |
"{1214E17F-B599-47AD-9F9B-2F62B4841C4D}" = protocol=6 | dir=in | app=c:\program files\netdrive\ndsvc.exe |
"{124E87FF-EEE8-4C1C-8035-8D1C06676BF3}" = protocol=6 | dir=in | app=c:\games\codemasters\of dragon rising\ofdr.exe |
"{1255D28B-3648-4AF9-8C46-E2D541B7B62F}" = protocol=17 | dir=in | app=c:\games\crysis\bin32\crysisdedicatedserver.exe |
"{1A8AD316-860E-471B-9367-445258615431}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbstreamerclient.exe |
"{1ABE30C6-63FE-4764-8FF5-3292BB731E22}" = protocol=17 | dir=in | app=c:\program files (x86)\symantec\pcanywhere\awhost32.exe |
"{1B6905EA-8BC2-4188-9813-B91B98D20AB6}" = protocol=17 | dir=in | app=c:\games\crysis\bin64\crysis.exe |
"{1D20D8B6-BCA8-4CDE-8D27-BFC8E3C7295C}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe |
"{1E2B4D6B-0947-42E1-90A0-DEB0FB9889B7}" = dir=in | app=c:\program files (x86)\windows live\messenger\livecall.exe |
"{2488B7E6-88B0-4FFC-A23A-EB3B697625C5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2665C79B-EF6B-4E87-AEBE-8DC5F8BFAD18}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{269EAD35-0B23-4052-B0EA-23049E2031D0}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2A49BC89-68B8-4F8B-9076-D8AB21F7D0A2}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\3dsmax.exe |
"{2C92AC9A-243A-4660-A779-AF94D3A3F1B5}" = protocol=17 | dir=in | app=c:\program files (x86)\cyanide\gamecenter\gamecenter.exe |
"{30AEB650-E24C-4BB9-ADD4-B037A75444F6}" = protocol=17 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\autorun\exe\autorun.exe |
"{30E4B3F7-0C80-4300-9DA8-3ED2643A6380}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{3138EE47-0130-49A6-8B1C-BD8CC73973C8}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe |
"{32E22B55-A9B5-48CE-809C-5044CC046DAF}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{33F62CF3-5EE9-48F3-AB02-5E1C57F764F6}" = protocol=6 | dir=in | app=c:\games\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{3447B501-B79C-4EB0-9AEB-F94387814F93}" = protocol=6 | dir=in | app=c:\games\steam\steam.exe |
"{34AF6FC2-9153-436A-950A-54A4A11587C1}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{36FEB5A1-4FFE-4591-AF41-6D67C8E92C98}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{376293D2-8A76-4B43-95BE-CB5EADC338BE}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe |
"{397AD825-53CE-4FA7-B48F-5F6C8F023C78}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{39F61E64-5714-4CF6-B060-1C1CE9C9A30C}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{3AA30E8C-F9F8-4251-8F5C-0798A107D0A7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3B26A191-68C4-4E1D-A3D6-E9FC1BA203D7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3B8567F8-7916-4428-AB26-26676F2982DD}" = protocol=17 | dir=in | app=c:\games\farming simulator 2011\farmingsimulator2011.exe |
"{3CB6DCF8-2FAA-4CC5-9BDD-DF674AE12972}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3CB9EC3C-97F0-4086-8C96-78FCFDF22DBA}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbtray.exe |
"{3E351773-BF6B-4555-A220-641E9D7BDA08}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{3FEF2CAD-22B0-4D0A-8294-B00DBE9B835C}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe |
"{426E7C3A-CD40-48C3-9497-9F99753AC8D6}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer_service.exe |
"{42BCC84C-9074-4259-A39E-3ACDE7910D1D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{45CD094C-58FE-44DE-A48C-5B19B92AD39A}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{463FD94C-1882-4BDF-BBED-7BDB980BDFAD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4993DF92-0ADB-4581-827D-E38065039D44}" = protocol=17 | dir=in | app=c:\games\codemasters\of dragon rising\ofdr.exe |
"{49BC4898-4A6E-486A-8F41-2C180EE82485}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft sql server\100\tools\binn\vsshell\common7\ide\ssms.exe |
"{49BCC1B0-FC8D-4CE1-91D6-470A07C5DD13}" = protocol=17 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{4D017576-6E2A-46AA-97A0-E05FF5D345D4}" = protocol=6 | dir=in | app=c:\games\call of duty 4 - modern warfare\iw3mp.exe |
"{4D26C6CA-5BE1-40EE-8C82-CFE52F19A7E3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{4D3CA061-2CBA-4632-8563-AD1104955FE0}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe |
"{4ED22C8A-F013-44AD-9DF5-12E120CA0682}" = protocol=17 | dir=in | app=c:\program files\netdrive\ndsvc.exe |
"{4FE583BB-BA01-44A6-BCD5-9C7B01289450}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5362A9C0-5716-4ADE-89F2-18963E9DA2D0}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{53CA82C2-0598-41FE-9BE4-29E5592D73B8}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{5CDF47A2-C3C6-44C7-B451-F99686C81F15}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{5DAD25D7-4557-44B5-ACC3-F8A12FC5ED0D}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbir.exe |
"{61AFF388-C03A-4DE5-A43D-DA391E68FFBD}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orb.exe |
"{620AF090-6CB2-4E7A-B3CF-8D169BEAEC8C}" = protocol=17 | dir=in | app=c:\games\codemasters\grid\grid.exe |
"{64C8AB8E-CFA7-48BC-A2E6-E6FD7F316D50}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{69424F72-103D-4EA4-817D-EEA0A3D2D458}" = protocol=6 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\pcm.exe |
"{6A6087AE-AFF9-44C9-A179-A7D53CCD2B92}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6B30B07A-E78C-4D04-8167-41EE1C53C8B4}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6F2CF863-4035-4F87-AF69-1F44E8690071}" = protocol=6 | dir=in | app=c:\games\ubisoft\the settlers 7 - paths to a kingdom\data\base\_dbg\bin\release\settlers7r.exe |
"{6FAA26DD-2493-42FF-BF3E-CC1B9BF64186}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{70F3E6A8-D702-4317-B62B-15F055D01D1C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{73BA6E12-7B21-4875-9CDB-CCEEE9BAE9DD}" = protocol=17 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{74299F98-C591-4E74-B94D-7FE24C1B0F26}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd8\powerdvd8.exe |
"{77686CFA-00F0-45A7-A4F7-2DFD7008EC80}" = protocol=17 | dir=in | app=c:\games\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{7B45B2DD-7527-4AB8-BC90-E91921854C05}" = protocol=6 | dir=in | app=c:\program files (x86)\symantec\pcanywhere\awhost32.exe |
"{7C41023F-9D8E-46A9-B1EE-B8016A73245C}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{7F333907-54B0-413E-A6B6-75E2E26F94A2}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{7F7E2E93-ABB2-4174-AF3E-713E6C0C391D}" = protocol=6 | dir=in | app=c:\games\crysis\bin64\crysis.exe |
"{810E1CE6-558D-49B5-845B-D22DB65C1922}" = protocol=6 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{81D28BF7-EFF9-4FB7-B0DD-B12D7AAA8112}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe |
"{8206ECA9-D226-419D-87FC-17A3F14B622A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8400DE6E-93C0-4247-8484-98772C7E36DD}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe |
"{87304806-5943-4ADF-9952-A15734EF524B}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbtray.exe |
"{880E4C7B-FAF0-4A78-AA89-64AB4F133CEF}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{8A862066-2A42-400F-8CB9-6BB151181CBB}" = protocol=17 | dir=in | app=c:\games\football manager 2011\fm.exe |
"{920A5B18-1271-464E-A79F-89FC9FD6C320}" = protocol=6 | dir=in | app=c:\games\crysis\bin32\crysis.exe |
"{92E14546-1F52-4D49-875B-32C54DC5542B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{939AECBE-0C6D-4D1F-8CD7-CFCFF9E661AE}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{950DC78E-D89E-46D7-AE45-01FAC6095C84}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{9609CA93-8AA2-419F-889B-A595634559D9}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{980FD4EE-B5D5-4779-AA05-0EBD5CF13B64}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{988E48C8-D54F-4D25-9E96-ACEF06926FF1}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe |
"{98F438E0-A700-49A6-9839-7AEAA050CCAE}" = protocol=17 | dir=in | app=c:\games\farming simulator 2011\game.exe |
"{9901CF9F-86FD-43A0-AB6F-7EE6F503C2EA}" = protocol=17 | dir=in | app=c:\games\crysis\bin32\crysis.exe |
"{9904317F-83C6-4ABE-89B1-0C01BCE64B41}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{9B62E5FC-F805-4148-AAAF-26FE5A018610}" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"{9CF57F52-6D56-4488-96A0-4CF197E692A7}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer_service.exe |
"{A39B1D6A-AD18-4BD0-9C69-73BAD1638EA5}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{A41C053C-0D7F-45F2-9B40-46F0C6A2FDC5}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{A602F802-717D-4B84-8243-14E80CA6FCC9}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A82D0A5A-BEB3-48E1-AC14-9E0983C2AA02}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{AB786F8D-E327-4300-B624-104744B8E01B}" = protocol=6 | dir=in | app=c:\games\crysis\bin32\crysisdedicatedserver.exe |
"{ABD4E070-35C9-46EA-9C06-60D269D25A11}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{ACAEA89A-D3AE-4B1F-B5AF-811D0D0945B2}" = protocol=17 | dir=in | app=c:\games\codemasters\f1 2010\f1_2010_game.exe |
"{B0420A70-44F5-4E31-A79E-04C7E792119C}" = protocol=6 | dir=in | app=c:\games\football manager 2011\fm.exe |
"{B1BC8200-4E44-43E4-BCAA-F2F5DBD853E4}" = protocol=17 | dir=in | app=c:\games\steam\steam.exe |
"{B29A4EC8-4CCC-44D3-BC42-5560F692D240}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B4C0BFA3-BADB-4AB7-9CF7-2CA0C558230F}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{B5AAEA45-92B7-4DA1-B430-468B59AE22AF}" = protocol=17 | dir=in | app=c:\games\crysis\bin64\crysisdedicatedserver.exe |
"{B5F4E25E-0EAE-4FEA-8CA5-DBF861F1D7E0}" = protocol=6 | dir=in | app=c:\games\crysis\bin64\crysisdedicatedserver.exe |
"{BA38193A-3E33-48E4-A54B-204FFB0B5B22}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbstreamerclient.exe |
"{BE1D9642-D51B-40E7-BDA1-C2792A30A4E7}" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\roaming\spotify\spotify.exe |
"{BEB7C9F2-3088-4194-850C-50D87A93D088}" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\roaming\spotify\spotify.exe |
"{BEC9A35C-DAB5-427A-8197-6C4ECF586803}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orb.exe |
"{C14A3AA2-5D22-4BC7-9D2C-D49B20C5963A}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{C168A9A2-4196-4189-BAFC-9C8305EC0464}" = dir=in | app=c:\program files (x86)\avg\avg8\avgupd.exe |
"{C39BB3F8-59A6-48C3-9C43-7F24204B3A61}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{C5243ABD-2F02-4850-A0B8-F3763C09C6BE}" = protocol=6 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\autorun\exe\autorun.exe |
"{C5F64F30-3CE9-4C48-8EA4-1EC2EA5D2F04}" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\roaming\dropbox\bin\dropbox.exe |
"{C6739ED7-8484-4235-95A0-36FB6521C00B}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{C8DB80F9-A3DD-4AED-B349-5C7577BD02D8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{CB8C4873-D50E-4FE4-AD79-CF7E40197D5B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{CD66AF77-DFFF-4E62-BE1D-EF6F230CCC48}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{CD8C463A-603F-4515-B852-2718CE62ACFD}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe |
"{CF18DEA1-5B3F-4893-9D7C-A32CC850B3CF}" = protocol=6 | dir=in | app=c:\games\codemasters\f1 2010\f1_2010_game.exe |
"{D089D4D2-0850-4B80-B05E-FA48C5DF8EED}" = protocol=17 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe |
"{D55D8077-5194-42A9-B0DF-D5D506DE3855}" = protocol=6 | dir=in | app=c:\games\farming simulator 2011\game.exe |
"{D7BF8294-225C-4DE3-92EA-39CA9BA62765}" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\roaming\dropbox\bin\dropbox.exe |
"{D86F105A-F16F-45C9-94EC-FC90A1A252FD}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{D879266D-7580-4959-AC06-9DE351941372}" = protocol=6 | dir=in | app=c:\games\codemasters\grid\grid.exe |
"{D931F933-7D55-407C-97BA-781317993AB5}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe |
"{DF4279A4-79CE-4934-9A2E-5B57AF5E2137}" = protocol=17 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\pcm.exe |
"{E1A71203-CCBA-45BB-8538-AFC4FCECB923}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft sql server\100\tools\binn\vsshell\common7\ide\ssms.exe |
"{E3816D45-D8AD-4672-BDE6-79F25ED10527}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E6CC4B3B-13F3-4F1A-A04A-9FDAE52F1DE5}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{E90FEDF8-706D-404F-AEE1-4CFDF244FF11}" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"{E98DEFA4-8E32-415B-9844-3B38ACAF3EB5}" = protocol=6 | dir=out | app=system |
"{EE5C34D8-B1FA-436D-AE9E-B01A26EC2688}" = protocol=6 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe |
"{F08819B5-0353-4E45-94F6-E8A5B6996864}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe |
"{F186911A-1C80-4B62-9EAF-7C3F48220A65}" = protocol=17 | dir=in | app=c:\games\ubisoft\the settlers 7 - paths to a kingdom\data\base\_dbg\bin\release\settlers7r.exe |
"{F3514E03-5825-418F-B24C-BDB4A60BAE58}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbir.exe |
"{F3646571-3EBF-4662-80D8-7AD851DEA20D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F400E143-7B65-43DD-A2D3-4DCBEDDD49FE}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe |
"{F451521E-A980-4656-94D8-6F40C37013D8}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe |
"{F4F69921-0489-471D-AC2F-DBCBAB1602E3}" = protocol=17 | dir=in | app=c:\games\call of duty 4 - modern warfare\iw3mp.exe |
"{F62EB4FB-C282-4DEC-AE37-E025D22B9ACA}" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\tvnserver.exe |
S

Svenvdb

Legacy Member
Extra Deel 1:

OTL Extras logfile created on: 3/06/2012 23:18:28 - Run 1
OTL by OldTimer - Version 3.2.46.0 Folder = C:\Users\Sven Van den brande\Desktop
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

4,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 35,31% Memory free
8,19 Gb Paging File | 3,75 Gb Available in Paging File | 45,78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 54,20 Gb Free Space | 11,64% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 89,37 Gb Free Space | 19,19% Space Free | Partition Type: NTFS
Drive W: | 4625,64 Gb Total Space | 1055,50 Gb Free Space | 22,82% Space Free | Partition Type: NTFS
Drive Z: | 929,46 Gb Total Space | 84,31 Gb Free Space | 9,07% Space Free | Partition Type: NTFS

Computer Name: HOOFDPC | User Name: Sven Van den brande | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

[HKEY_USERS\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OpenAsAWebSite] -- C:\Program Files (x86)\Microsoft WebMatrix\WebMatrix.exe #ExecuteCommand# SiteFromFolder %L (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Xinorbis3] -- "C:\Program Files (x86)\freshney.org\Xinorbis3\Xinorbis3.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OpenAsAWebSite] -- C:\Program Files (x86)\Microsoft WebMatrix\WebMatrix.exe #ExecuteCommand# SiteFromFolder %L (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Xinorbis3] -- "C:\Program Files (x86)\freshney.org\Xinorbis3\Xinorbis3.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = F2 A0 36 9A EE 9F C8 01 [binary data]
"VistaSp2" = 49 2F 9F E3 DD 44 CA 01 [binary data]

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DisableUnicastResponsesToMulticastBroadcast" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03EBF445-60B7-4DF6-9CC2-B33F8A11B0B9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{0408DD07-FA81-462E-A12D-C2E47E449ED4}" = lport=10243 | protocol=6 | dir=in | app=system |
"{09A03F37-85E1-489B-B086-3787B9A09E15}" = lport=50900 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{0D020845-B8AF-403E-ADCA-ED862DB5870C}" = rport=10243 | protocol=6 | dir=out | app=system |
"{17FD6234-FAB0-4DCD-A622-86FB7432AE13}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe |
"{1F3285F9-C03F-4F2E-9BAC-C076D2268B49}" = lport=10300 | protocol=6 | dir=in | app=c:\program files (x86)\devolo\informer\devinf.exe |
"{22E8B288-ECDE-4445-9DFC-E65129314141}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{26288E5A-4F61-4266-B3C5-E49C4FCE1F96}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{2E376C74-5055-45E8-8B6C-E45663D1C4DB}" = lport=4500 | protocol=17 | dir=in | name=ipsec (ike nat-t) |
"{37E67397-7A52-4028-8FA8-5CC9BCB16D2B}" = lport=51001 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{3810C291-40BF-4E48-AB5D-3F20ED6CDAD9}" = lport=135 | protocol=6 | dir=in | name=rpc endpoint mapper and dcom infrastructure |
"{38A084E3-6B64-471B-BB29-0CF63B92F78F}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{3E908D87-08E6-4BEE-925D-95BE8679E8BD}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{4DC5BDE8-D86D-4B26-B32E-1224784BCDF6}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{532AE015-D973-4FC4-ABC1-2C8DBFBFA9F0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{5A67ABEB-167F-412D-9FFB-BA7046E7B891}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{6826B9BE-E004-4463-9FB6-A6EAC49FE797}" = lport=2869 | protocol=6 | dir=in | app=system |
"{6ACECF83-1E60-42A3-9263-94B3DD915DBF}" = lport=51000 | protocol=6 | dir=in | name=adobe version cue cs4 server |
"{6E179584-AA04-4897-8004-2FC87CD956B3}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 |
"{7513D8A8-E803-4E73-B29E-3506793A1115}" = lport=2869 | protocol=6 | dir=in | app=system |
"{80FC61C2-5025-441E-9CF3-9C9877564821}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{847B2304-6C1A-431E-A777-C0985EF084DA}" = lport=2799 | protocol=17 | dir=in | name=altova license metering port (udp) |
"{98759E8C-0E4A-44B7-ADC5-85C8A1F627B2}" = lport=50901 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{9F6DF86F-9958-4A3D-9EBC-D971EA83F86F}" = lport=500 | protocol=17 | dir=in | name=ipsec (ike) |
"{A42CFF81-94C1-47E3-BD45-62954552B388}" = lport=3704 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{AAA118F5-B949-4E4E-95B4-CEAFED152FCE}" = lport=5900 | protocol=6 | dir=in | name=vnc5900 |
"{CC2FA554-A295-40CC-AB16-9F08C6D1CEC9}" = lport=2869 | protocol=6 | dir=in | app=system |
"{D5EA0770-B402-4D00-84A7-E3463DE87372}" = lport=2799 | protocol=6 | dir=in | name=altova license metering port (tcp) |
"{DFC8586A-0AD2-481F-962F-692BF08875E6}" = lport=5800 | protocol=6 | dir=in | name=vnc5800 |
"{E13EC772-0F0C-417D-A75E-C886154DD28C}" = lport=6004 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\outlook.exe |
"{E6591E1F-F62E-4212-B788-E28FDF159BD0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{ECF705F9-0D77-449C-BF9C-47EF3ECADED2}" = lport=3703 | protocol=6 | dir=in | name=adobe version cue cs3 server |
"{FB0F1FD2-C1CE-4471-9645-3AD617504423}" = lport=10301 | protocol=17 | dir=in | app=c:\program files (x86)\devolo\informer\devinf.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{008840C1-23FA-421D-8D91-154932BA41A2}" = protocol=6 | dir=in | app=c:\games\farming simulator 2011\farmingsimulator2011.exe |
"{013F6725-D241-4D75-B7CA-FEADED1E8173}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe |
"{020B2A0D-9E0E-4D64-9F21-93B8370AB7DC}" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\tvnserver.exe |
"{023796D8-12F1-42FB-98A3-52BE9F31A128}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{02A392C5-3A8B-4887-B23B-CF12DDBC6916}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{074E1F74-EC4B-47EB-A4C3-B593F2AEBB08}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{096430D3-5A18-40BB-B845-6846F1979A42}" = protocol=6 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{0DA3433E-4675-4498-BC8B-3FBBE9A2B06A}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{0E9EC003-1650-47EF-A262-AB6805406203}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe |
"{0EE6A3A3-2A2A-4D68-9BE2-14667E562E38}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe |
"{0EFCE28D-2B22-4BE9-860C-9AE364698000}" = protocol=6 | dir=in | app=c:\program files (x86)\cyanide\gamecenter\gamecenter.exe |
"{1214E17F-B599-47AD-9F9B-2F62B4841C4D}" = protocol=6 | dir=in | app=c:\program files\netdrive\ndsvc.exe |
"{124E87FF-EEE8-4C1C-8035-8D1C06676BF3}" = protocol=6 | dir=in | app=c:\games\codemasters\of dragon rising\ofdr.exe |
"{1255D28B-3648-4AF9-8C46-E2D541B7B62F}" = protocol=17 | dir=in | app=c:\games\crysis\bin32\crysisdedicatedserver.exe |
"{1A8AD316-860E-471B-9367-445258615431}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbstreamerclient.exe |
"{1ABE30C6-63FE-4764-8FF5-3292BB731E22}" = protocol=17 | dir=in | app=c:\program files (x86)\symantec\pcanywhere\awhost32.exe |
"{1B6905EA-8BC2-4188-9813-B91B98D20AB6}" = protocol=17 | dir=in | app=c:\games\crysis\bin64\crysis.exe |
"{1D20D8B6-BCA8-4CDE-8D27-BFC8E3C7295C}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64.exe |
"{1E2B4D6B-0947-42E1-90A0-DEB0FB9889B7}" = dir=in | app=c:\program files (x86)\windows live\messenger\livecall.exe |
"{2488B7E6-88B0-4FFC-A23A-EB3B697625C5}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{2665C79B-EF6B-4E87-AEBE-8DC5F8BFAD18}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{269EAD35-0B23-4052-B0EA-23049E2031D0}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{2A49BC89-68B8-4F8B-9076-D8AB21F7D0A2}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\3dsmax.exe |
"{2C92AC9A-243A-4660-A779-AF94D3A3F1B5}" = protocol=17 | dir=in | app=c:\program files (x86)\cyanide\gamecenter\gamecenter.exe |
"{30AEB650-E24C-4BB9-ADD4-B037A75444F6}" = protocol=17 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\autorun\exe\autorun.exe |
"{30E4B3F7-0C80-4300-9DA8-3ED2643A6380}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{3138EE47-0130-49A6-8B1C-BD8CC73973C8}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe |
"{32E22B55-A9B5-48CE-809C-5044CC046DAF}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{33F62CF3-5EE9-48F3-AB02-5E1C57F764F6}" = protocol=6 | dir=in | app=c:\games\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{3447B501-B79C-4EB0-9AEB-F94387814F93}" = protocol=6 | dir=in | app=c:\games\steam\steam.exe |
"{34AF6FC2-9153-436A-950A-54A4A11587C1}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{36FEB5A1-4FFE-4591-AF41-6D67C8E92C98}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{376293D2-8A76-4B43-95BE-CB5EADC338BE}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe |
"{397AD825-53CE-4FA7-B48F-5F6C8F023C78}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\rm.exe |
"{39F61E64-5714-4CF6-B060-1C1CE9C9A30C}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{3AA30E8C-F9F8-4251-8F5C-0798A107D0A7}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3B26A191-68C4-4E1D-A3D6-E9FC1BA203D7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3B8567F8-7916-4428-AB26-26676F2982DD}" = protocol=17 | dir=in | app=c:\games\farming simulator 2011\farmingsimulator2011.exe |
"{3CB6DCF8-2FAA-4CC5-9BDD-DF674AE12972}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{3CB9EC3C-97F0-4086-8C96-78FCFDF22DBA}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbtray.exe |
"{3E351773-BF6B-4555-A220-641E9D7BDA08}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{3FEF2CAD-22B0-4D0A-8294-B00DBE9B835C}" = protocol=17 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe |
"{426E7C3A-CD40-48C3-9497-9F99753AC8D6}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer_service.exe |
"{42BCC84C-9074-4259-A39E-3ACDE7910D1D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{45CD094C-58FE-44DE-A48C-5B19B92AD39A}" = protocol=6 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{463FD94C-1882-4BDF-BBED-7BDB980BDFAD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4993DF92-0ADB-4581-827D-E38065039D44}" = protocol=17 | dir=in | app=c:\games\codemasters\of dragon rising\ofdr.exe |
"{49BC4898-4A6E-486A-8F41-2C180EE82485}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft sql server\100\tools\binn\vsshell\common7\ide\ssms.exe |
"{49BCC1B0-FC8D-4CE1-91D6-470A07C5DD13}" = protocol=17 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{4D017576-6E2A-46AA-97A0-E05FF5D345D4}" = protocol=6 | dir=in | app=c:\games\call of duty 4 - modern warfare\iw3mp.exe |
"{4D26C6CA-5BE1-40EE-8C82-CFE52F19A7E3}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\groove.exe |
"{4D3CA061-2CBA-4632-8563-AD1104955FE0}" = protocol=6 | dir=in | app=c:\program files\autodesk\3ds max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe |
"{4ED22C8A-F013-44AD-9DF5-12E120CA0682}" = protocol=17 | dir=in | app=c:\program files\netdrive\ndsvc.exe |
"{4FE583BB-BA01-44A6-BCD5-9C7B01289450}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{5362A9C0-5716-4ADE-89F2-18963E9DA2D0}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{53CA82C2-0598-41FE-9BE4-29E5592D73B8}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{5CDF47A2-C3C6-44C7-B451-F99686C81F15}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{5DAD25D7-4557-44B5-ACC3-F8A12FC5ED0D}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbir.exe |
"{61AFF388-C03A-4DE5-A43D-DA391E68FFBD}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orb.exe |
"{620AF090-6CB2-4E7A-B3CF-8D169BEAEC8C}" = protocol=17 | dir=in | app=c:\games\codemasters\grid\grid.exe |
"{64C8AB8E-CFA7-48BC-A2E6-E6FD7F316D50}" = protocol=17 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{69424F72-103D-4EA4-817D-EEA0A3D2D458}" = protocol=6 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\pcm.exe |
"{6A6087AE-AFF9-44C9-A179-A7D53CCD2B92}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6B30B07A-E78C-4D04-8167-41EE1C53C8B4}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe |
"{6F2CF863-4035-4F87-AF69-1F44E8690071}" = protocol=6 | dir=in | app=c:\games\ubisoft\the settlers 7 - paths to a kingdom\data\base\_dbg\bin\release\settlers7r.exe |
"{6FAA26DD-2493-42FF-BF3E-CC1B9BF64186}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{70F3E6A8-D702-4317-B62B-15F055D01D1C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{73BA6E12-7B21-4875-9CDB-CCEEE9BAE9DD}" = protocol=17 | dir=in | app=c:\program files\realvnc\vnc4\winvnc4.exe |
"{74299F98-C591-4E74-B94D-7FE24C1B0F26}" = dir=in | app=c:\program files (x86)\cyberlink\powerdvd8\powerdvd8.exe |
"{77686CFA-00F0-45A7-A4F7-2DFD7008EC80}" = protocol=17 | dir=in | app=c:\games\electronic arts\battlefield bad company 2\bfbc2updater.exe |
"{7B45B2DD-7527-4AB8-BC90-E91921854C05}" = protocol=6 | dir=in | app=c:\program files (x86)\symantec\pcanywhere\awhost32.exe |
"{7C41023F-9D8E-46A9-B1EE-B8016A73245C}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{7F333907-54B0-413E-A6B6-75E2E26F94A2}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer_service.exe |
"{7F7E2E93-ABB2-4174-AF3E-713E6C0C391D}" = protocol=6 | dir=in | app=c:\games\crysis\bin64\crysis.exe |
"{810E1CE6-558D-49B5-845B-D22DB65C1922}" = protocol=6 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{81D28BF7-EFF9-4FB7-B0DD-B12D7AAA8112}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe |
"{8206ECA9-D226-419D-87FC-17A3F14B622A}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{8400DE6E-93C0-4247-8484-98772C7E36DD}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs4\server\bin\versioncuecs4.exe |
"{87304806-5943-4ADF-9952-A15734EF524B}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbtray.exe |
"{880E4C7B-FAF0-4A78-AA89-64AB4F133CEF}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{8A862066-2A42-400F-8CB9-6BB151181CBB}" = protocol=17 | dir=in | app=c:\games\football manager 2011\fm.exe |
"{920A5B18-1271-464E-A79F-89FC9FD6C320}" = protocol=6 | dir=in | app=c:\games\crysis\bin32\crysis.exe |
"{92E14546-1F52-4D49-875B-32C54DC5542B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{939AECBE-0C6D-4D1F-8CD7-CFCFF9E661AE}" = protocol=17 | dir=in | app=c:\program files (x86)\common files\adobe\adobe version cue cs3\server\bin\versioncuecs3.exe |
"{950DC78E-D89E-46D7-AE45-01FAC6095C84}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\umi.exe |
"{9609CA93-8AA2-419F-889B-A595634559D9}" = protocol=17 | dir=in | app=c:\program files (x86)\pinnacle\studio 14\programs\studio.exe |
"{980FD4EE-B5D5-4779-AA05-0EBD5CF13B64}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{988E48C8-D54F-4D25-9E96-ACEF06926FF1}" = protocol=6 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe |
"{98F438E0-A700-49A6-9839-7AEAA050CCAE}" = protocol=17 | dir=in | app=c:\games\farming simulator 2011\game.exe |
"{9901CF9F-86FD-43A0-AB6F-7EE6F503C2EA}" = protocol=17 | dir=in | app=c:\games\crysis\bin32\crysis.exe |
"{9904317F-83C6-4ABE-89B1-0C01BCE64B41}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{9B62E5FC-F805-4148-AAAF-26FE5A018610}" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"{9CF57F52-6D56-4488-96A0-4CF197E692A7}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer_service.exe |
"{A39B1D6A-AD18-4BD0-9C69-73BAD1638EA5}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{A41C053C-0D7F-45F2-9B40-46F0C6A2FDC5}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{A602F802-717D-4B84-8243-14E80CA6FCC9}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A82D0A5A-BEB3-48E1-AC14-9E0983C2AA02}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{AB786F8D-E327-4300-B624-104744B8E01B}" = protocol=6 | dir=in | app=c:\games\crysis\bin32\crysisdedicatedserver.exe |
"{ABD4E070-35C9-46EA-9C06-60D269D25A11}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{ACAEA89A-D3AE-4B1F-B5AF-811D0D0945B2}" = protocol=17 | dir=in | app=c:\games\codemasters\f1 2010\f1_2010_game.exe |
"{B0420A70-44F5-4E31-A79E-04C7E792119C}" = protocol=6 | dir=in | app=c:\games\football manager 2011\fm.exe |
"{B1BC8200-4E44-43E4-BCAA-F2F5DBD853E4}" = protocol=17 | dir=in | app=c:\games\steam\steam.exe |
"{B29A4EC8-4CCC-44D3-BC42-5560F692D240}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{B4C0BFA3-BADB-4AB7-9CF7-2CA0C558230F}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe |
"{B5AAEA45-92B7-4DA1-B430-468B59AE22AF}" = protocol=17 | dir=in | app=c:\games\crysis\bin64\crysisdedicatedserver.exe |
"{B5F4E25E-0EAE-4FEA-8CA5-DBF861F1D7E0}" = protocol=6 | dir=in | app=c:\games\crysis\bin64\crysisdedicatedserver.exe |
"{BA38193A-3E33-48E4-A54B-204FFB0B5B22}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbstreamerclient.exe |
"{BE1D9642-D51B-40E7-BDA1-C2792A30A4E7}" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\roaming\spotify\spotify.exe |
"{BEB7C9F2-3088-4194-850C-50D87A93D088}" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\roaming\spotify\spotify.exe |
"{BEC9A35C-DAB5-427A-8197-6C4ECF586803}" = protocol=17 | dir=in | app=c:\program files (x86)\winamp remote\bin\orb.exe |
"{C14A3AA2-5D22-4BC7-9D2C-D49B20C5963A}" = protocol=6 | dir=in | app=c:\program files (x86)\common files\adobe\cs4servicemanager\cs4servicemanager.exe |
"{C168A9A2-4196-4189-BAFC-9C8305EC0464}" = dir=in | app=c:\program files (x86)\avg\avg8\avgupd.exe |
"{C39BB3F8-59A6-48C3-9C43-7F24204B3A61}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{C5243ABD-2F02-4850-A0B8-F3763C09C6BE}" = protocol=6 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\autorun\exe\autorun.exe |
"{C5F64F30-3CE9-4C48-8EA4-1EC2EA5D2F04}" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\roaming\dropbox\bin\dropbox.exe |
"{C6739ED7-8484-4235-95A0-36FB6521C00B}" = protocol=6 | dir=in | app=c:\program files (x86)\utorrent\utorrent.exe |
"{C8DB80F9-A3DD-4AED-B349-5C7577BD02D8}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe |
"{CB8C4873-D50E-4FE4-AD79-CF7E40197D5B}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{CD66AF77-DFFF-4E62-BE1D-EF6F230CCC48}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version5\teamviewer.exe |
"{CD8C463A-603F-4515-B852-2718CE62ACFD}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\server.exe |
"{CF18DEA1-5B3F-4893-9D7C-A32CC850B3CF}" = protocol=6 | dir=in | app=c:\games\codemasters\f1 2010\f1_2010_game.exe |
"{D089D4D2-0850-4B80-B05E-FA48C5DF8EED}" = protocol=17 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe |
"{D55D8077-5194-42A9-B0DF-D5D506DE3855}" = protocol=6 | dir=in | app=c:\games\farming simulator 2011\game.exe |
"{D7BF8294-225C-4DE3-92EA-39CA9BA62765}" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\roaming\dropbox\bin\dropbox.exe |
"{D86F105A-F16F-45C9-94EC-FC90A1A252FD}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version6\teamviewer.exe |
"{D879266D-7580-4959-AC06-9DE351941372}" = protocol=6 | dir=in | app=c:\games\codemasters\grid\grid.exe |
"{D931F933-7D55-407C-97BA-781317993AB5}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gnucash.exe |
"{DF4279A4-79CE-4934-9A2E-5B57AF5E2137}" = protocol=17 | dir=in | app=c:\games\cyanide\pro cycling manager - seizoen 2011\pcm.exe |
"{E1A71203-CCBA-45BB-8538-AFC4FCECB923}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft sql server\100\tools\binn\vsshell\common7\ide\ssms.exe |
"{E3816D45-D8AD-4672-BDE6-79F25ED10527}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{E6CC4B3B-13F3-4F1A-A04A-9FDAE52F1DE5}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\live meeting 8\console\pwconsole.exe |
"{E90FEDF8-706D-404F-AEE1-4CFDF244FF11}" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"{E98DEFA4-8E32-415B-9844-3B38ACAF3EB5}" = protocol=6 | dir=out | app=system |
"{EE5C34D8-B1FA-436D-AE9E-B01A26EC2688}" = protocol=6 | dir=in | app=c:\program files (x86)\google\google talk\googletalk.exe |
"{F08819B5-0353-4E45-94F6-E8A5B6996864}" = protocol=6 | dir=in | app=c:\program files (x86)\gnucash\bin\gconfd-2.exe |
"{F186911A-1C80-4B62-9EAF-7C3F48220A65}" = protocol=17 | dir=in | app=c:\games\ubisoft\the settlers 7 - paths to a kingdom\data\base\_dbg\bin\release\settlers7r.exe |
"{F3514E03-5825-418F-B24C-BDB4A60BAE58}" = protocol=6 | dir=in | app=c:\program files (x86)\winamp remote\bin\orbir.exe |
"{F3646571-3EBF-4662-80D8-7AD851DEA20D}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{F400E143-7B65-43DD-A2D3-4DCBEDDD49FE}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\monitor.exe |
"{F451521E-A980-4656-94D8-6F40C37013D8}" = protocol=17 | dir=in | app=c:\program files (x86)\autodesk\backburner\manager.exe |
"{F4F69921-0489-471D-AC2F-DBCBAB1602E3}" = protocol=17 | dir=in | app=c:\games\call of duty 4 - modern warfare\iw3mp.exe |
"{F62EB4FB-C282-4DEC-AE37-E025D22B9ACA}" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\tvnserver.exe |
S

Svenvdb

Legacy Member
Extra Deel 2:

"{F7090F3D-3ACD-4FA7-B3A2-72A443B01114}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{FA5C1D98-2EA4-45A0-B9C3-D568EECB0522}" = protocol=17 | dir=in | app=c:\program files\autodesk\3ds max 2011\3dsmax.exe |
"{FF638086-2C6A-449D-89A1-53EB4C8F98A0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"TCP Query User{0393C651-C26B-4A88-A5AF-374BD9CFD226}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\jre\bin\java.exe |
"TCP Query User{03C20CCF-50F0-43F6-B0CC-1357A4A5E9D5}C:\program files (x86)\zattoo\zattoo.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zattoo\zattoo.exe |
"TCP Query User{067B0B7A-602A-4602-9E40-F8DF77AC28FE}C:\users\sven van den brande\appdata\local\temp\kvncviewer.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\kvncviewer.exe |
"TCP Query User{07B3B583-4A6B-4E70-AFBD-68A6010A8CD6}I:\ipconfigurator.exe" = protocol=6 | dir=in | app=i:\ipconfigurator.exe |
"TCP Query User{08E2A6E7-659E-4472-A410-591ACE84C045}C:\program files (x86)\zend\zend studio for eclipse - 6.1.2\zendstudio.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zend\zend studio for eclipse - 6.1.2\zendstudio.exe |
"TCP Query User{0AC6D947-B400-41B1-983C-08229190454E}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{0EB39F07-E187-42FC-8D47-8B8532BC741B}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"TCP Query User{10EDC5E5-755E-4AC4-A475-685CFC49829E}C:\users\sven van den brande\appdata\local\temp\vncviewer.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\vncviewer.exe |
"TCP Query User{12233591-EB63-4D00-9249-1A61E11D8BF4}C:\program files (x86)\zattoo\zattood.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zattoo\zattood.exe |
"TCP Query User{124FD9FD-71FD-46EE-AFA9-7AC3DF2E4E73}D:\stick sven\weegschalen + server\weegschaal.exe" = protocol=6 | dir=in | app=d:\stick sven\weegschalen + server\weegschaal.exe |
"TCP Query User{12FCDAC8-DE63-403C-B0D7-1D3358158069}D:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\jre\bin\java.exe" = protocol=6 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\jre\bin\java.exe |
"TCP Query User{163791B2-3234-4D9F-98EA-28280BBCB519}C:\program files (x86)\altova\xmlspy2006\xmlspy.exe" = protocol=6 | dir=in | app=c:\program files (x86)\altova\xmlspy2006\xmlspy.exe |
"TCP Query User{165D6411-4CED-4708-A400-4C9BE7C845DF}C:\program files (x86)\participatory culture foundation\miro\xulrunner\python\miro_downloader.exe" = protocol=6 | dir=in | app=c:\program files (x86)\participatory culture foundation\miro\xulrunner\python\miro_downloader.exe |
"TCP Query User{165E46DA-5D16-4DF9-BAE6-F069566FEA7C}C:\users\sven van den brande\appdata\local\google\chrome\application\chrome.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\google\chrome\application\chrome.exe |
"TCP Query User{18469283-7653-4878-91E2-6576FA9E5732}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.1536.1250365673\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.1536.1250365673\sapinst.exe |
"TCP Query User{187F3924-7350-4257-A2F9-CC070BFAC7A5}C:\program files (x86)\adobe\adobe dreamweaver cs4\dreamweaver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs4\dreamweaver.exe |
"TCP Query User{194202EE-A8D2-4305-9938-F9E791457393}C:\program files (x86)\tightvnc\vncviewer.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"TCP Query User{1B4BBABE-546B-4A56-80DF-6F57E9F9D4A8}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\sapinst.exe |
"TCP Query User{1EB44A29-C57A-480D-A575-FE38BEC7F7F9}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\sapinst.exe |
"TCP Query User{22076627-D243-45B1-8343-AAB30CA02426}C:\games\football superstars\fspatchr.exe" = protocol=6 | dir=in | app=c:\games\football superstars\fspatchr.exe |
"TCP Query User{23AC22F5-1FB7-455A-9767-8772F5518C48}C:\users\sven van den brande\appdata\local\temp\rar$ex04.081\ipconfigurator.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex04.081\ipconfigurator.exe |
"TCP Query User{2438A23A-6D58-40AA-8FA7-DBB1580BF2A8}C:\users\sven van den brande\desktop\net-tool\net - tool.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\net-tool\net - tool.exe |
"TCP Query User{28E2EB70-7C60-489D-8C4D-2AF4039A77D0}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\jre\bin\java.exe |
"TCP Query User{2A93B4CC-CD64-408C-8DA8-B83FC189B89C}C:\program files (x86)\zattoo\zattoo.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zattoo\zattoo.exe |
"TCP Query User{2CBEBFD7-D994-43AB-AE70-65741F720FF9}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\sapinst.exe |
"TCP Query User{2FFECFA6-FB66-4234-AE73-4F3019BA5888}C:\users\sven van den brande\desktop\teamspeak3-server_win32-3.0.0-beta9\teamspeak3-server_win32\ts3server_win32.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\teamspeak3-server_win32-3.0.0-beta9\teamspeak3-server_win32\ts3server_win32.exe |
"TCP Query User{3195D0D1-BCC7-48C5-8A91-E0221B23ADEC}C:\users\sven van den brande\desktop\remote desktop client\remote desktop client\remote desktop client\bin\master control.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\remote desktop client\remote desktop client\remote desktop client\bin\master control.exe |
"TCP Query User{34358B79-97DD-4E90-A1BE-D0DCEBBD5847}C:\users\sven van den brande\appdata\local\temp\rar$ex00.606\ipconfigurator.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex00.606\ipconfigurator.exe |
"TCP Query User{38A17D5C-4A27-4656-9E18-EC947908493B}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"TCP Query User{3E339FF7-1844-4C62-939F-F328157720F7}C:\users\sven van den brande\desktop\networkactivportscannerv4.0.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\networkactivportscannerv4.0.exe |
"TCP Query User{3E9310FF-A378-43D1-AB85-48141A2AACAE}C:\program files (x86)\jetbrains\phpstorm 2.1.5\bin\phpstorm.exe" = protocol=6 | dir=in | app=c:\program files (x86)\jetbrains\phpstorm 2.1.5\bin\phpstorm.exe |
"TCP Query User{402BA3AD-297E-401F-AB59-2D4FE8E1DE10}C:\program files (x86)\spiceworks\bin\spiceworks.exe" = protocol=6 | dir=in | app=c:\program files (x86)\spiceworks\bin\spiceworks.exe |
"TCP Query User{409461A9-30EF-4D76-B234-5EA8FC1847EE}C:\games\football superstars\fsclientr.exe" = protocol=6 | dir=in | app=c:\games\football superstars\fsclientr.exe |
"TCP Query User{42D0D78B-59C9-44C2-8FF3-725900F831A5}C:\program files (x86)\zend\apache2\bin\httpd.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zend\apache2\bin\httpd.exe |
"TCP Query User{49023F90-4B88-4BFF-A50C-21BCB61FB3C1}C:\program files (x86)\java\jre1.6.0_07\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.6.0_07\bin\java.exe |
"TCP Query User{49B5975A-C237-414D-9143-EC1219CCCA33}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"TCP Query User{4C28A68A-98A8-4746-8F6D-E928EB3F5755}C:\users\sven van den brande\desktop\cryengine_pc_v3_3_9_3410_freesdk\bin64\launcher.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\cryengine_pc_v3_3_9_3410_freesdk\bin64\launcher.exe |
"TCP Query User{5547A38B-2FD0-4F12-96C7-CAC354685E8C}C:\program files\real\realplayer\realplay.exe" = protocol=6 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"TCP Query User{571429D7-5E82-49B9-84EA-60C74BC4ACA6}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"TCP Query User{5C9B074D-E97B-4DF2-AFC8-83FDBFFCBFD1}D:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\sapinst.exe" = protocol=6 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\sapinst.exe |
"TCP Query User{60784D40-F6EE-4188-8526-69372585CF37}C:\program files (x86)\zend\zend studio - 7.0.0\zendstudio.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zend\zend studio - 7.0.0\zendstudio.exe |
"TCP Query User{6484B66B-1128-48BF-BC25-E5D6BAE677ED}E:\nettool\plextor storx nettool 1.2.exe" = protocol=6 | dir=in | app=e:\nettool\plextor storx nettool 1.2.exe |
"TCP Query User{69186536-F860-4092-9CAE-4FF89F9C3E4A}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{6C47FCEC-6DFF-4717-B21D-481D258109DF}D:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\jre\bin\java.exe" = protocol=6 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\jre\bin\java.exe |
"TCP Query User{6EAC46E0-5CA0-4B32-A7BA-4F196E633DB5}C:\program files\nucleus home backup\jvm\bin\bjw.exe" = protocol=6 | dir=in | app=c:\program files\nucleus home backup\jvm\bin\bjw.exe |
"TCP Query User{74B034A7-9D97-4D7E-893C-10390837FA67}C:\users\sven van den brande\desktop\raidar\raidar.net.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\raidar\raidar.net.exe |
"TCP Query User{759B8DE2-22FA-4066-A3CD-200F40E4CE8C}C:\games\cod2\cod2mp_s.exe" = protocol=6 | dir=in | app=c:\games\cod2\cod2mp_s.exe |
"TCP Query User{76E48C68-3661-420A-BFC1-E4E91BD6DFB5}C:\program files (x86)\entropia universe\bin32\entropia.exe" = protocol=6 | dir=in | app=c:\program files (x86)\entropia universe\bin32\entropia.exe |
"TCP Query User{771381C7-A3D0-4F22-8EDE-85AC7534B5AF}C:\program files (x86)\netgear readynas\raidar.exe" = protocol=6 | dir=in | app=c:\program files (x86)\netgear readynas\raidar.exe |
"TCP Query User{789E8423-FE88-4F90-97CA-E71E2402EBDE}C:\program files (x86)\tightvnc\winvnc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tightvnc\winvnc.exe |
"TCP Query User{7A75A274-A2CA-4BD4-B2E1-4808376EC598}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\jre\bin\java.exe |
"TCP Query User{86BBD3B2-BED7-4BCF-A2E3-CE53E43896CE}C:\games\atari\test drive unlimited\testdriveunlimited.exe" = protocol=6 | dir=in | app=c:\games\atari\test drive unlimited\testdriveunlimited.exe |
"TCP Query User{8911B01A-1D9D-41F5-A915-0D24032C7224}C:\program files (x86)\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files (x86)\sopcast\adv\sopadver.exe |
"TCP Query User{8B105A1E-B900-4880-AC30-8A70B3EB004A}D:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\sapinst.exe" = protocol=6 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\sapinst.exe |
"TCP Query User{8E89B7E1-8510-41BB-ADBB-7D1C91603417}C:\program files\nucleus obm\jvm\bin\bjw.exe" = protocol=6 | dir=in | app=c:\program files\nucleus obm\jvm\bin\bjw.exe |
"TCP Query User{95FBB548-73DD-4DD4-9F4A-F7C78CDC63F1}C:\program files (x86)\kontrolpack\kontrolpack.exe" = protocol=6 | dir=in | app=c:\program files (x86)\kontrolpack\kontrolpack.exe |
"TCP Query User{9A111D70-23A4-4246-BE2A-5D49637DA254}C:\users\sven van den brande\desktop\citiesxl_downloader.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\citiesxl_downloader.exe |
"TCP Query User{9AA0DD88-7FB4-4928-BE51-9BA6BF42F7DA}C:\users\sven van den brande\appdata\local\temp\wzse0.tmp\upgradest.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\wzse0.tmp\upgradest.exe |
"TCP Query User{9FC3DF57-23E5-40DF-A563-E4E344F6E7A4}C:\program files (x86)\java\jdk1.6.0_05\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jdk1.6.0_05\bin\java.exe |
"TCP Query User{A1EF19B3-E194-44C7-A6E7-BC72E2B25394}C:\program files (x86)\netbeans 6.8\bin\netbeans.exe" = protocol=6 | dir=in | app=c:\program files (x86)\netbeans 6.8\bin\netbeans.exe |
"TCP Query User{A6A75A4D-D2BD-458D-BA85-52678FB1D0DA}C:\program files (x86)\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files (x86)\sopcast\sopcast.exe |
"TCP Query User{A99AC177-98BF-43F1-B420-55BC2BB9997C}C:\games\america's army\system\armyops.exe" = protocol=6 | dir=in | app=c:\games\america's army\system\armyops.exe |
"TCP Query User{B2D83C87-BACC-4F71-BA75-4115EF5324BC}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\sapinst.exe |
"TCP Query User{B6FD3E20-9368-4989-A8E8-1993DC53C2DC}C:\games\monte cristo\cities xl\cds\citiesxl_http.exe" = protocol=6 | dir=in | app=c:\games\monte cristo\cities xl\cds\citiesxl_http.exe |
"TCP Query User{BA66228A-1DF1-4963-8B65-5B31D04747D8}C:\games\real-time racing\rtr.exe" = protocol=6 | dir=in | app=c:\games\real-time racing\rtr.exe |
"TCP Query User{BBA843A6-1B91-4582-80EB-24DF58C48D04}C:\program files (x86)\microsoft visual studio 10.0\common7\ide\devenv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft visual studio 10.0\common7\ide\devenv.exe |
"TCP Query User{BE3EF99A-82BB-4310-89EA-B685D4F8BA57}I:\winsock_weegschalen_server - kopie\server\project1.exe" = protocol=6 | dir=in | app=i:\winsock_weegschalen_server - kopie\server\project1.exe |
"TCP Query User{BF379D01-D6EF-4260-A7F0-AD466FD5BD5E}C:\users\sven van den brande\desktop\ipconfigurator.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\ipconfigurator.exe |
"TCP Query User{BF64748F-D332-41DA-9A57-3A6A8E9A7E4E}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\sapinst.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\sapinst.exe |
"TCP Query User{C3F3D9D1-96B5-4850-ADEA-F58F02CAA944}C:\program files (x86)\axis communications\axis camera management\axiscameramanagement.exe" = protocol=6 | dir=in | app=c:\program files (x86)\axis communications\axis camera management\axiscameramanagement.exe |
"TCP Query User{C44ABF6C-F3BA-4A68-B7A4-F316354E0962}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"TCP Query User{C4DAE403-83C5-4094-A1D8-EAF89F174B38}C:\program files\fwb\jvm\bin\bjw.exe" = protocol=6 | dir=in | app=c:\program files\fwb\jvm\bin\bjw.exe |
"TCP Query User{C771EF6E-DA2B-45D2-B126-35A18BE0A643}C:\games\codemasters\dirt\dirt.exe" = protocol=6 | dir=in | app=c:\games\codemasters\dirt\dirt.exe |
"TCP Query User{C8373016-A9E6-4E35-AB0C-9C3B00FEAE6C}C:\users\sven van den brande\desktop\cryengine_v3_3_5_2456_freesdk\bin64\launcher.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\desktop\cryengine_v3_3_5_2456_freesdk\bin64\launcher.exe |
"TCP Query User{C8F0A22E-734E-498B-9FCA-68BCA9D81367}C:\users\sven van den brande\appdata\local\temp\rar$ex13.1733\ipconfigurator.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex13.1733\ipconfigurator.exe |
"TCP Query User{C9DEEE82-4F69-4642-B651-940E9B912E38}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\jre\bin\java.exe |
"TCP Query User{CA54D36E-C0D3-437E-BF67-1BF9524DE83E}C:\program files (x86)\zattoo\zattood.exe" = protocol=6 | dir=in | app=c:\program files (x86)\zattoo\zattood.exe |
"TCP Query User{CC977022-4D36-4526-A5E7-D16D881E2A3C}C:\program files (x86)\woopra\woopra.exe" = protocol=6 | dir=in | app=c:\program files (x86)\woopra\woopra.exe |
"TCP Query User{D7E627E2-C436-4304-AB27-C15B5732AF53}C:\games\far cry 2\bin\farcry2.exe" = protocol=6 | dir=in | app=c:\games\far cry 2\bin\farcry2.exe |
"TCP Query User{DC0A1077-60CB-4601-99BE-0D2568B340EF}C:\program files (x86)\pangolin\pangolin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\pangolin\pangolin.exe |
"TCP Query User{DCF6ACCC-8C4B-4968-8094-E977C27C36E0}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"TCP Query User{DFB47C3F-BB95-4051-A62C-1A9F2F34906E}C:\program files (x86)\pc satellite tv\pc satellite tv.exe" = protocol=6 | dir=in | app=c:\program files (x86)\pc satellite tv\pc satellite tv.exe |
"TCP Query User{DFC64225-28F1-4F23-A969-C63A26322885}C:\program files (x86)\speedtouch\dr speedtouch\drst.exe" = protocol=6 | dir=in | app=c:\program files (x86)\speedtouch\dr speedtouch\drst.exe |
"TCP Query User{E08DA79E-FD2A-46BD-96E0-E5BDEFCCD891}C:\program files (x86)\microsoft visual studio\vb98\vb6.exe" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft visual studio\vb98\vb6.exe |
"TCP Query User{E1BBAF4D-F9C2-44AE-AF96-8EC165EDE95D}C:\games\atari\test drive unlimited\testdriveunlimited.exe" = protocol=6 | dir=in | app=c:\games\atari\test drive unlimited\testdriveunlimited.exe |
"TCP Query User{EE1DF42B-BA9E-4CAB-8023-5BC2B5099831}C:\program files (x86)\bitcoin\bitcoin.exe" = protocol=6 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin.exe |
"TCP Query User{F29AFBFE-0240-4F02-9CD8-1DB8A5CB91F5}C:\program files (x86)\eclipse\eclipse.exe" = protocol=6 | dir=in | app=c:\program files (x86)\eclipse\eclipse.exe |
"TCP Query User{F4A39178-C3C9-44FA-A153-C328B1A09981}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"TCP Query User{F71F6B16-FE9D-4221-9D2D-98C1D8C8F2C0}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\jre\bin\java.exe" = protocol=6 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\jre\bin\java.exe |
"TCP Query User{F91AACDD-5999-4684-9B0B-FA0F904241A0}C:\games\atari\boiling point\xenus.exe" = protocol=6 | dir=in | app=c:\games\atari\boiling point\xenus.exe |
"TCP Query User{FA58098F-FF48-4437-884E-3994ABA66191}C:\program files (x86)\entropia universe\bin32\eigc\eigcc_main.exe" = protocol=6 | dir=in | app=c:\program files (x86)\entropia universe\bin32\eigc\eigcc_main.exe |
"UDP Query User{00B5DD10-9E86-408A-A45F-EF3F75D992F6}C:\program files (x86)\zattoo\zattood.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zattoo\zattood.exe |
"UDP Query User{013B548E-F07A-4C0E-8993-AED828A93D27}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\sapinst.exe |
"UDP Query User{039B5F91-E648-4CEC-B60A-4361AFA7CCC4}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{0486EA0E-DB72-4EDE-9C7D-D814595B4B33}C:\program files (x86)\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\sopcast\adv\sopadver.exe |
"UDP Query User{07436B43-BDB6-424C-8327-818C5773A9A6}C:\program files (x86)\pangolin\pangolin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\pangolin\pangolin.exe |
"UDP Query User{078D02BA-ED6E-49A7-9829-674F03C1A2FA}C:\program files (x86)\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\google\google earth\plugin\geplugin.exe |
"UDP Query User{07A08EB4-803A-44D4-B095-642C61C8C6FD}C:\program files (x86)\altova\xmlspy2006\xmlspy.exe" = protocol=17 | dir=in | app=c:\program files (x86)\altova\xmlspy2006\xmlspy.exe |
"UDP Query User{12AF5FAD-4815-4A2D-9B76-88CA52838CA3}C:\program files (x86)\netbeans 6.8\bin\netbeans.exe" = protocol=17 | dir=in | app=c:\program files (x86)\netbeans 6.8\bin\netbeans.exe |
"UDP Query User{17685C92-5038-4F73-B9BE-A8592439CE80}C:\games\atari\test drive unlimited\testdriveunlimited.exe" = protocol=17 | dir=in | app=c:\games\atari\test drive unlimited\testdriveunlimited.exe |
"UDP Query User{182EB10A-C942-495C-AF46-1C4CEB3F511C}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe |
"UDP Query User{1B57FB13-F277-461A-8D38-7E0731DCF90C}C:\program files (x86)\participatory culture foundation\miro\xulrunner\python\miro_downloader.exe" = protocol=17 | dir=in | app=c:\program files (x86)\participatory culture foundation\miro\xulrunner\python\miro_downloader.exe |
"UDP Query User{1D7A6849-FFB6-4B8A-965D-CBDC2027BEF4}C:\users\sven van den brande\appdata\local\google\chrome\application\chrome.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\google\chrome\application\chrome.exe |
"UDP Query User{1F9E3FC5-1EFB-4BB5-9A65-16443DA6C78A}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\sapinst.exe |
"UDP Query User{2273B2CF-8CD8-4936-8826-64D4B380FFC9}E:\nettool\plextor storx nettool 1.2.exe" = protocol=17 | dir=in | app=e:\nettool\plextor storx nettool 1.2.exe |
"UDP Query User{23851680-4D6C-4AB8-A9CC-6654C2E32D3B}C:\users\sven van den brande\appdata\local\temp\rar$ex00.606\ipconfigurator.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex00.606\ipconfigurator.exe |
"UDP Query User{23B7DE8C-6478-4318-BDD2-0736C9EBC23F}C:\program files (x86)\adobe\adobe dreamweaver cs4\dreamweaver.exe" = protocol=17 | dir=in | app=c:\program files (x86)\adobe\adobe dreamweaver cs4\dreamweaver.exe |
"UDP Query User{27975973-68A5-48A6-A837-F223C1A889F4}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\jre\bin\java.exe |
"UDP Query User{2BBF91D4-5C69-4667-BA3F-52419BDA7DF7}C:\program files (x86)\zend\zend studio for eclipse - 6.1.2\zendstudio.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zend\zend studio for eclipse - 6.1.2\zendstudio.exe |
"UDP Query User{2E438565-E3DE-4A04-A345-DB18166BB144}C:\users\sven van den brande\appdata\local\temp\kvncviewer.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\kvncviewer.exe |
"UDP Query User{317F831B-33BB-4573-B07E-7AC48C1624F1}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{35A4E604-7014-418F-A0B8-79353D721F80}C:\program files (x86)\netgear readynas\raidar.exe" = protocol=17 | dir=in | app=c:\program files (x86)\netgear readynas\raidar.exe |
"UDP Query User{363D0F52-20C0-4AD8-9131-A3A0B4B29C99}C:\program files (x86)\zend\zend studio - 7.0.0\zendstudio.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zend\zend studio - 7.0.0\zendstudio.exe |
"UDP Query User{3BFCB154-7D47-46FC-95F2-78A48E1A3961}C:\program files (x86)\speedtouch\dr speedtouch\drst.exe" = protocol=17 | dir=in | app=c:\program files (x86)\speedtouch\dr speedtouch\drst.exe |
"UDP Query User{3C4C6CA2-0F83-4705-8E6A-5D31172A1631}C:\program files (x86)\zattoo\zattoo.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zattoo\zattoo.exe |
"UDP Query User{3E372ADD-51F4-49C1-8019-A8999AE1A893}C:\games\far cry 2\bin\farcry2.exe" = protocol=17 | dir=in | app=c:\games\far cry 2\bin\farcry2.exe |
"UDP Query User{3E9D49AC-5649-4075-A9FE-8EEE08878D28}C:\program files (x86)\axis communications\axis camera management\axiscameramanagement.exe" = protocol=17 | dir=in | app=c:\program files (x86)\axis communications\axis camera management\axiscameramanagement.exe |
"UDP Query User{4063FFD8-D3A8-433D-86D9-45E5EE29053F}C:\games\america's army\system\armyops.exe" = protocol=17 | dir=in | app=c:\games\america's army\system\armyops.exe |
"UDP Query User{4DD2D400-60C8-469D-BE3E-CC4C74BEA4D0}C:\games\atari\boiling point\xenus.exe" = protocol=17 | dir=in | app=c:\games\atari\boiling point\xenus.exe |
"UDP Query User{4F28C1E7-D2FA-4EA9-82F8-B148EC5A3645}C:\program files (x86)\microsoft visual studio\vb98\vb6.exe" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft visual studio\vb98\vb6.exe |
"UDP Query User{51EF89DD-4567-4940-8A5B-C6891F9485AE}C:\program files\nucleus obm\jvm\bin\bjw.exe" = protocol=17 | dir=in | app=c:\program files\nucleus obm\jvm\bin\bjw.exe |
"UDP Query User{5424D5AC-E9D7-4E1D-8D9B-179E0DBDF4B3}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{576535FB-32CA-442A-B938-C1DE2BFBD1E2}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\sapinst.exe |
"UDP Query User{5B96C4FB-E0F3-40E1-872D-86065B0748DF}D:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\jre\bin\java.exe" = protocol=17 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\jre\bin\java.exe |
"UDP Query User{5BD94F56-1A4E-4B59-8BE5-3F054FB459A1}C:\program files\nucleus home backup\jvm\bin\bjw.exe" = protocol=17 | dir=in | app=c:\program files\nucleus home backup\jvm\bin\bjw.exe |
"UDP Query User{5DD0B135-331A-440D-AF6F-1BC40B71C618}C:\program files (x86)\spiceworks\bin\spiceworks.exe" = protocol=17 | dir=in | app=c:\program files (x86)\spiceworks\bin\spiceworks.exe |
"UDP Query User{5E85F674-0FF7-4A1C-A23B-FE9BC1F93282}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.10540.1250365391\jre\bin\java.exe |
"UDP Query User{606E1129-D453-4E5B-A62F-1ACA0643B896}C:\games\real-time racing\rtr.exe" = protocol=17 | dir=in | app=c:\games\real-time racing\rtr.exe |
"UDP Query User{62602D54-5318-45C9-86DB-E837F2C73198}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe |
"UDP Query User{64AD9585-C278-4A47-AB7F-D96FB2F3AB52}C:\games\football superstars\fsclientr.exe" = protocol=17 | dir=in | app=c:\games\football superstars\fsclientr.exe |
"UDP Query User{6841A38D-DCCA-4196-B712-DF4512262217}C:\users\sven van den brande\desktop\cryengine_pc_v3_3_9_3410_freesdk\bin64\launcher.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\cryengine_pc_v3_3_9_3410_freesdk\bin64\launcher.exe |
"UDP Query User{6BB87F61-EAB4-41C3-831E-A90AE5E1B48A}C:\program files (x86)\entropia universe\bin32\eigc\eigcc_main.exe" = protocol=17 | dir=in | app=c:\program files (x86)\entropia universe\bin32\eigc\eigcc_main.exe |
"UDP Query User{6C03D2E5-1996-46FD-9D5B-A46D50580E93}C:\program files (x86)\zend\apache2\bin\httpd.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zend\apache2\bin\httpd.exe |
"UDP Query User{6FF852BB-9086-4D0B-8851-195D10C6FB91}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11844.1250448945\jre\bin\java.exe |
"UDP Query User{7097DDB1-9CFC-456E-A687-A7CF5075A440}C:\users\sven van den brande\appdata\local\temp\vncviewer.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\vncviewer.exe |
"UDP Query User{7228080D-C21F-4B87-BFB8-AD90B7DAA965}D:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\jre\bin\java.exe" = protocol=17 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\jre\bin\java.exe |
"UDP Query User{72E9E192-23A2-4ECB-AF63-402A2D45F439}C:\users\sven van den brande\desktop\remote desktop client\remote desktop client\remote desktop client\bin\master control.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\remote desktop client\remote desktop client\remote desktop client\bin\master control.exe |
"UDP Query User{76921EDE-58AC-4CAB-9593-B6B05CE0AB82}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\sapinst.exe |
"UDP Query User{77645C20-06D9-481A-B107-2E3DA7C4497B}C:\program files (x86)\zattoo\zattood.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zattoo\zattood.exe |
"UDP Query User{777E7FC1-E298-49FF-B008-4D6BE8CB4D81}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.1536.1250365673\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.1536.1250365673\sapinst.exe |
S

Svenvdb

Legacy Member
Extra Deel 3:

"UDP Query User{779A282B-2995-4810-9533-B6FF1046F1ED}C:\program files (x86)\woopra\woopra.exe" = protocol=17 | dir=in | app=c:\program files (x86)\woopra\woopra.exe |
"UDP Query User{7BE99EBE-DB60-4494-9B2C-170991397A99}D:\stick sven\weegschalen + server\weegschaal.exe" = protocol=17 | dir=in | app=d:\stick sven\weegschalen + server\weegschaal.exe |
"UDP Query User{7C3EE980-A21B-4062-9DD0-66AED3F55610}C:\program files (x86)\tightvnc\winvnc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\winvnc.exe |
"UDP Query User{7C9C5429-7681-408B-B802-399620C7B013}C:\games\football superstars\fspatchr.exe" = protocol=17 | dir=in | app=c:\games\football superstars\fspatchr.exe |
"UDP Query User{824F43B4-8352-47D5-968B-01CE8ABAF042}C:\users\sven van den brande\desktop\cryengine_v3_3_5_2456_freesdk\bin64\launcher.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\cryengine_v3_3_5_2456_freesdk\bin64\launcher.exe |
"UDP Query User{8961BC4B-71FD-4FD5-A20F-2F492CCE4266}C:\users\sven van den brande\appdata\local\temp\rar$ex04.081\ipconfigurator.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex04.081\ipconfigurator.exe |
"UDP Query User{89B477CD-C339-4899-AF1D-7503085413F1}C:\program files (x86)\microsoft visual studio 10.0\common7\ide\devenv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft visual studio 10.0\common7\ide\devenv.exe |
"UDP Query User{8FCF143C-6570-44F3-B858-9740F3D9B9AC}C:\users\sven van den brande\appdata\local\temp\rar$ex13.1733\ipconfigurator.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\rar$ex13.1733\ipconfigurator.exe |
"UDP Query User{91B8DCC4-F559-4DD6-9389-D1BFE95FEAE3}I:\ipconfigurator.exe" = protocol=17 | dir=in | app=i:\ipconfigurator.exe |
"UDP Query User{92E0265C-6572-4143-96ED-F4176B3DDAA7}D:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\sapinst.exe" = protocol=17 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.9872.1250411817\sapinst.exe |
"UDP Query User{949CE4B4-ECDE-4D9B-A9DD-BFE01E64B172}C:\program files\fwb\jvm\bin\bjw.exe" = protocol=17 | dir=in | app=c:\program files\fwb\jvm\bin\bjw.exe |
"UDP Query User{951A1158-650C-4C7C-8717-26128D64F171}C:\users\sven van den brande\desktop\ipconfigurator.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\ipconfigurator.exe |
"UDP Query User{95D51FC7-2C52-4296-BC6D-EA7619B09563}C:\users\sven van den brande\desktop\raidar\raidar.net.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\raidar\raidar.net.exe |
"UDP Query User{9A2B0899-E0DB-4AE3-938D-3790940BC00D}C:\program files (x86)\zattoo\zattoo.exe" = protocol=17 | dir=in | app=c:\program files (x86)\zattoo\zattoo.exe |
"UDP Query User{9C40C11E-73C7-48F4-9DF0-EBF983330010}C:\program files (x86)\tightvnc\vncviewer.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tightvnc\vncviewer.exe |
"UDP Query User{9E07D1D1-9406-473F-A9D6-6E5CFB930BC5}C:\program files (x86)\eclipse\eclipse.exe" = protocol=17 | dir=in | app=c:\program files (x86)\eclipse\eclipse.exe |
"UDP Query User{9FA03E2B-B751-4D12-A26D-D24D0F500DC6}D:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\sapinst.exe" = protocol=17 | dir=in | app=d:\usr\sap\nsp\tmp\sapinst_exe.8424.1250411738\sapinst.exe |
"UDP Query User{A2569468-7166-4892-9B17-AE74C98C2A5F}C:\users\sven van den brande\desktop\citiesxl_downloader.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\citiesxl_downloader.exe |
"UDP Query User{A4BD255F-7F14-4A4B-82E0-F21AC8D9FA65}C:\program files (x86)\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files (x86)\sopcast\sopcast.exe |
"UDP Query User{ABBE2C8F-BCD2-4D02-A1AE-B4EB487DBEE1}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe |
"UDP Query User{B20E5D0A-EF2E-4818-8D3A-1D808DBB041A}C:\program files (x86)\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe |
"UDP Query User{B230746E-26E6-42ED-A59B-E44E0404346D}C:\program files (x86)\bitcoin\bitcoin.exe" = protocol=17 | dir=in | app=c:\program files (x86)\bitcoin\bitcoin.exe |
"UDP Query User{BDAAB166-8543-4964-BB4A-E8E9A8BE939B}C:\program files\real\realplayer\realplay.exe" = protocol=17 | dir=in | app=c:\program files\real\realplayer\realplay.exe |
"UDP Query User{C3FB86E4-A405-4CEB-94A8-8E688BF7D447}C:\users\sven van den brande\desktop\networkactivportscannerv4.0.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\networkactivportscannerv4.0.exe |
"UDP Query User{C555485B-F984-4A29-8940-29E6E34EB2C3}C:\games\monte cristo\cities xl\cds\citiesxl_http.exe" = protocol=17 | dir=in | app=c:\games\monte cristo\cities xl\cds\citiesxl_http.exe |
"UDP Query User{C6C75E15-4DC7-43AE-ADA2-CCF8A03C5E45}C:\program files (x86)\pc satellite tv\pc satellite tv.exe" = protocol=17 | dir=in | app=c:\program files (x86)\pc satellite tv\pc satellite tv.exe |
"UDP Query User{C76D486B-2960-48D6-99D0-474000A1DB43}C:\program files (x86)\java\jdk1.6.0_05\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jdk1.6.0_05\bin\java.exe |
"UDP Query User{C84711DB-5798-459F-BB67-9394D8944FE7}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\sapinst.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.11612.1255289328\sapinst.exe |
"UDP Query User{C912B131-4DC8-4B38-B845-03B8F2D36B72}C:\program files (x86)\kontrolpack\kontrolpack.exe" = protocol=17 | dir=in | app=c:\program files (x86)\kontrolpack\kontrolpack.exe |
"UDP Query User{CBFE0646-3734-429D-9BAA-4F3BFD88D15D}C:\program files (x86)\java\jre1.6.0_07\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.6.0_07\bin\java.exe |
"UDP Query User{CD03223C-C433-423A-823E-A73D99ECA689}C:\program files (x86)\entropia universe\bin32\entropia.exe" = protocol=17 | dir=in | app=c:\program files (x86)\entropia universe\bin32\entropia.exe |
"UDP Query User{CD6CEB60-2756-47D8-BBD3-48F204DD7760}C:\program files (x86)\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files (x86)\electronic arts\eadm\core.exe |
"UDP Query User{D178F148-E895-47F9-BA74-73B168806876}C:\users\sven van den brande\desktop\net-tool\net - tool.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\net-tool\net - tool.exe |
"UDP Query User{D9FA4D10-D12A-4601-AB00-2A0E82C15178}C:\users\sven van den brande\appdata\local\temp\wzse0.tmp\upgradest.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\wzse0.tmp\upgradest.exe |
"UDP Query User{E600CD5B-BCEE-46C9-9297-C88B36586C1A}C:\program files (x86)\jetbrains\phpstorm 2.1.5\bin\phpstorm.exe" = protocol=17 | dir=in | app=c:\program files (x86)\jetbrains\phpstorm 2.1.5\bin\phpstorm.exe |
"UDP Query User{EA042DDA-4ED8-4992-88D2-B527C4F87D1B}C:\games\codemasters\dirt\dirt.exe" = protocol=17 | dir=in | app=c:\games\codemasters\dirt\dirt.exe |
"UDP Query User{EC0C9614-D0F7-4E9D-87AD-26577085F8F7}C:\users\sven van den brande\desktop\teamspeak3-server_win32-3.0.0-beta9\teamspeak3-server_win32\ts3server_win32.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\desktop\teamspeak3-server_win32-3.0.0-beta9\teamspeak3-server_win32\ts3server_win32.exe |
"UDP Query User{F3DD111C-60FE-4EE2-9693-0FD860F501E8}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.7644.1250366255\jre\bin\java.exe |
"UDP Query User{F7171C03-6B4C-49CF-AA52-0B9216D70F57}C:\games\cod2\cod2mp_s.exe" = protocol=17 | dir=in | app=c:\games\cod2\cod2mp_s.exe |
"UDP Query User{FC7975A3-D65B-4CD6-AA80-9520E643183B}C:\games\atari\test drive unlimited\testdriveunlimited.exe" = protocol=17 | dir=in | app=c:\games\atari\test drive unlimited\testdriveunlimited.exe |
"UDP Query User{FF916F3B-0D65-454E-BE01-F39647EDFEAF}I:\winsock_weegschalen_server - kopie\server\project1.exe" = protocol=17 | dir=in | app=i:\winsock_weegschalen_server - kopie\server\project1.exe |
"UDP Query User{FFEBE4CD-0F74-4582-AA1F-8357041FE3DF}C:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\jre\bin\java.exe" = protocol=17 | dir=in | app=c:\users\sven van den brande\appdata\local\temp\sapinst_exe.3220.1250366483\jre\bin\java.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{034106B5-54B7-467F-B477-5B7DBB492624}" = Microsoft Sync Framework Services v1.0 SP1 (x64)
"{03AC245F-4C64-425C-89CF-7783C1D3AB2C}" = Microsoft Sync Framework 2.0 Provider Services (x64) ENU
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{0C270C59-8706-42B8-A2AD-6E5EE18BC90B}" = SQL Server 2008 R2 Reporting Services
"{0F37D969-1260-419E-B308-EF7D29ABDE20}" = Web Deployment Tool
"{101738D7-D805-37A9-BB91-1F2C351782BF}" = Microsoft .NET Framework 3.5 Language Pack SP1 - nld
"{1330309E-64D3-43F4-AA18-BC856182B5DB}" = SQL Server 2008 R2 BI Development Studio
"{139D6308-027D-31C5-B43D-C13F8A8CCC98}" = Microsoft Team Foundation Server 2010 Object Model for Lightswitch 2011 - ENU
"{183C740A-0406-380F-A235-2EC2F8A28D13}" = Microsoft Windows SDK MSHelp (30514)
"{1AB7EDC5-D891-34C5-9FF1-BE6A85ACC44B}" = Microsoft Team Foundation Server 2010 Object Model - ENU
"{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}" = Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219
"{1CB6C387-65A7-327F-B4A5-7DDC75A291AF}" = Microsoft Visual Studio 2010 Office Developer Tools (x64)
"{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}" = Microsoft Sync Services for ADO.NET v2.0 SP1 (x64)
"{234F6B0D-10AE-4BB7-B2F3-E48D4861952D}" = SQL Server 2008 R2 Common Files
"{23EA8626-1A8A-453A-ACC4-77CED745849A}" = Microsoft .NET Framework 2.0 SDK (x64) - ENU
"{2453DBC8-ACC4-4711-BD03-0C15353AA3D8}" = SQL Server 2008 R2 Reporting Services
"{288D79EE-A2D1-42AF-9597-B0ADCC23A8ED}" = Microsoft SQL Server VSS Writer
"{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64
"{29C93182-34F6-3275-A18D-59326851CD57}" = Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - enu
"{2D290715-B0FC-3898-9247-62F803A585DF}" = Microsoft Windows SDK for Windows 7 Redistributable Components for Common Tools (30514)
"{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64
"{2DAA8349-5698-4F3F-B634-F31AE3159CC6}" = Milestone XProtect Smart Client 6.0d (64-bit)
"{2E81ADBE-DED7-4B54-9C8D-FBD885C259C5}" = Microsoft SQL Server 2008 Database Engine Services
"{312E8540-0799-45D5-A02E-DFB8FCA93CCA}" = SQL Server 2008 R2 BI Development Studio
"{3156336D-8E44-3671-A6FE-AE51D3D6564E}" = Microsoft Windows SDK for Windows 7 (7.1)
"{36F70DEE-1EBF-4707-AFA2-E035EEAEBAA1}" = SQL Server 2008 R2 Common Files
"{39BFB02A-9692-0409-A808-3F5C7B1F8953}" = Autodesk 3ds Max 2011 64-bit
"{471AAD2C-9078-4DAC-BD43-FA10FB7C3FCE}" = Microsoft SQL Server 2008 R2 Native Client
"{48A7B11D-C3E1-3BEE-AF6C-8976F6E705A6}" = Microsoft Windows SDK for Windows 7 Redistributable Components for Application Verifier (30514)
"{4A8CE6D7-4D52-43B9-970B-03FC75FAD667}" = Microsoft SQL Server System CLR Types (x64)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5134B35A-B559-4762-94A4-FD4918977953}" = Microsoft Web Deploy 2.0
"{51E5BC99-A087-4CFF-8D93-462903EA7E12}" = SQL Server 2008 R2 Management Studio
"{5318020E-E32C-4A33-BC8D-EEF5CC2F6CA1}" = SQL Server 2008 R2 Database Engine Services
"{5DE154DF-A55E-4FA5-BE59-32E78FCACF3E}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{6292D514-17A4-403F-98F9-E150F10C043D}" = Microsoft SQL Server 2008 Setup Support Files
"{62EED300-E841-4083-A1D6-60B906271804}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Tools
"{64D5BBC6-5270-3711-AA39-31C1087AF4E6}" = Microsoft Visual Studio 2008 Remote Debugger - ENU
"{662014D2-0450-37ED-ABAE-157C88127BEB}" = Visual Studio 2010 Prerequisites - English
"{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64
"{6C8D7973-31F9-32E1-A820-8DD857910323}" = Microsoft Windows SDK for Windows 7 Utilities for Win32 Development (30514)
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{6D10FB2C-82A9-40F2-91D0-7BE64CF0DAF2}" = Microsoft SQL Server 2008 R2 Setup (English)
"{6DE721A5-5E89-4D74-994C-652BB3C0672E}" = Pinnacle videodriver
"{72AB7E6F-BC24-481E-8C45-1AB5B3DD795D}" = SQL Server 2008 R2 Management Studio
"{7563F495-80F5-0409-A514-747C66C22449}" = Autodesk 3ds Max 2011 64-bit Components
"{75F299F3-8234-47CD-BB40-2994C1B1105E}" = Microsoft Visual Studio 2005 64bit Prerequisites (x64) - ENU
"{78ABC433-6020-46c0-B7BA-CA72E5E0A368}" = HP Scanjet 3800 series 9.0
"{7C2A7CCA-A6C2-4F38-BE0D-070601B26333}" = Milestone XProtect Smart Client 6.0d (64-bit)
"{7E35AD35-5FE0-4DB5-80C5-13353CEEDC56}_is1" = XviD MPEG-4 Video Codec 64-BIT rev.1.2.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{824563DE-75AD-4166-9DC0-B6482F206535}" = Belgium e-ID middleware 3.5.4 (build 6535)
"{8424B163-D1E0-48B7-88A2-C7A61767B3D7}" = Microsoft SQL Server Compact 4.0 x64 ENU
"{8438EC02-B8A9-462D-AC72-1B521349C001}" = Microsoft Sync Framework Runtime v1.0 SP1 (x64)
"{84452C2C-BDCC-36F3-A189-CE15F02A47FB}" = Microsoft Windows SDK for Windows 7 Headers and Libraries (30514)
"{88387B3B-B110-392F-B919-1A15B48F21D4}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x64
"{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64
"{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4
"{88BAE373-00F4-3E33-828F-96E89E5E0CB9}" = Microsoft Visual Studio 2010 IntelliTrace Collection (x64)
"{89026002-A893-42D9-9E20-6829B844735E}" = Application Verifier (x64)
"{8A665A38-9FFC-4220-B5C2-895F438EE5DF}" = SQL Server 2008 R2 Reporting Services
"{8A7CAA24-7B23-410B-A7C3-F994B0944160}" = Microsoft Virtual PC 2007
"{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4
"{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}" = Microsoft Sync Framework 2.0 Core Components (x64) ENU
"{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64
"{8DF42813-48B5-3D82-91A7-450B9170D932}" = Microsoft Visual Studio LightSwitch 2011 Deployment Prerequisites
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{8FF0ACBD-17A5-3637-95F4-D7C69723E2BF}" = Microsoft Visual Studio 2010 Performance Collection Tools SP1 - ENU
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0413-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Dutch) 2007
"{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{951E6223-AC28-345E-BCF4-B55C1267E321}" = Microsoft Windows SDK for Windows 7 Samples (30514)
"{9aa5f39c-a8de-46b0-919a-0248f8bc8490}" = Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense
"{9ACF3FDB-C8E6-444C-8C64-13A221F7BFFD}" = Microsoft SQL Server Native Client
"{9B2C4509-2B9F-4303-BA74-E2F9BB773F03}" = Oracle VM VirtualBox 4.1.8
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}" = Microsoft Security Client
"{9DFA5914-C275-42E0-810E-C88E46A7F9EA}" = SQL Server 2008 R2 Full text search
"{9FFAE13C-6160-4DD0-A67A-DAC5994F81BD}" = SQL Server 2008 R2 Database Engine Services
"{A06F883B-5E97-486F-BD22-7EAB77E8F701}" = Microsoft SQL Server 2008 Database Engine Services
"{A0B0F02C-410B-3DE3-9740-EC4C3D902532}" = Microsoft Windows SDK for Windows 7 Common Utilities (30514)
"{A2122A9C-A699-4365-ADF8-68FEAC125D61}" = SQL Server 2008 R2 Database Engine Shared
"{A2C55034-8DAF-3755-BA85-CC321707FE99}" = Microsoft Windows SDK for Visual Studio .NET 4.0 Framework Tools
"{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64
"{A7E4E7DD-2099-4D58-AE31-6E0F663066DD}" = SQL Server 2008 R2 Full text search
"{A992BBAA-723D-4574-A07F-983BF8FAA3E1}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Win32 Tools
"{AB33D723-6E62-4D9B-8364-87A3161A3335}" = Microsoft Visual Studio 2005 Remote Debugger (x64) - ENU
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{ADBD6E65-46CB-4A97-9AFB-64963FEACC40}" = Microsoft SQL Server 2008 RsFx Driver
"{AE11E248-B67A-4E3E-BDAF-AA53E00BD289}" = SQL Server 2008 R2 Reporting Services
"{AF2CB1FE-FD46-4D85-8C63-5C46E825E177}" = Logitech QuickCam
"{B37A99DD-88E2-4ED0-80B4-1E054AB354BF}" = Adobe InDesign CS4 Icon Handler x64
"{B6E3757B-5E77-3915-866A-CCFC4B8D194C}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053
"{B7D0C3BC-CB39-3CA1-9295-A23A93994893}" = Microsoft Windows SDK for Windows 7 Redistributable Components for Windows Debugging Tools (30514)
"{BB57A765-FFFE-498B-8C1E-6C9CE2AB92BA}" = Microsoft SQL Server 2008 R2 RsFx Driver
"{C3600AE6-93A0-3DB7-B7AA-45BD58F133B5}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"{C942A025-A840-4BF2-8987-849C0DD44574}" = SQL Server 2008 R2 Database Engine Shared
"{CC15A5FC-B6D3-4A2D-8A26-D8F2702A3C00}" = UltraMon
"{CC4878C0-4A6A-49CD-AAA7-DD3FCB06CC84}" = Microsoft Web Platform Installer 3.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D3E39E77-0EB4-36FB-B97A-8C8AB21B9A45}" = Visual Studio .NET Prerequisites - English
"{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit)
"{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}" = Microsoft SQL Server Compact 3.5 SP2 x64 ENU
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{DA67488A-2689-4F10-B90F-D2F6977509D6}" = Microsoft SQL Server 2008 R2 Management Objects (x64)
"{DBF6B4E9-CD43-476A-895D-4D688D41CE63}" = Composite 2011 (64-bit)
"{DBFC6AAE-DCCB-4C23-B01C-3EDDDC03298B}" = Debugging Tools for Windows (x64)
"{DC911ADF-7B60-40F2-A112-FB1EB6402D07}" = Microsoft Security Client NL-NL Language Pack
"{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4
"{E5748D30-7E6D-3A8E-BFE6-C1D02C6DDABB}" = Microsoft Help Viewer 1.1
"{E7F9E526-2324-437B-A609-E8C5309465CB}" = Microsoft Windows Performance Toolkit
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{EF8B1A2E-9CCB-3AB2-91E3-4EEDAB1294E1}" = Microsoft Device Emulator (64 bit) version 3.0 - ENU
"{F1C4B89A-8BF0-3D7C-8095-BAE412FBEA3F}" = Microsoft Windows SDK .NET Framework Tools (30514)
"{F31183CF-E10F-4DE1-BB59-6C0FF38E481E}" = Sql Server Customer Experience Improvement Program
"{F5079164-1DB9-3BDA-853B-F78AF67CE071}" = Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"{F8EDC0F8-15BC-4411-8762-77105C8AAEEC}" = Microsoft Antimalware Service NL-NL Language Pack
"{FA7394B8-CE65-4F9E-AC99-F372AD365424}" = SQL Server 2008 R2 Database Engine Services
"{FBD367D1-642F-47CF-B79B-9BE48FB34007}" = SQL Server 2008 R2 Database Engine Services
"49CF605F02C7954F4E139D18828DE298CD59217C" = Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit" = Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit
"Best Uninstall Tool_is1" = Best Uninstall Tool
"CCleaner" = CCleaner
"E49DC3242147B1CE26E782EE1D1DF1746618B4EF" = Stuurprogrammapakket voor Windows - Fedict SmartCard (12/08/2009 4.0.0.2)
"FBX Plugin 2009.0 for Max 2009 64" = FBX Plugin 2009.0 for Max 2009 64
"HP Imaging Device Functions" = HP Imaging Device Functions 9.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 9.0
"HPOCR" = HP OCR Software 9.0
"Microsoft .NET Framework 2.0 SDK (x64) - ENU" = Microsoft .NET Framework 2.0 SDK (x64) - ENU
"Microsoft .NET Framework 3.5 Language Pack SP1 - nld" = Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Help Viewer 1.1" = Microsoft Help Viewer 1.1
"Microsoft Security Client" = Microsoft Security Essentials
"Microsoft SQL Server 10" = Microsoft SQL Server 2008 (64-bit)
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008 (64-bit)
"Microsoft SQL Server 2008 R2" = Microsoft SQL Server 2008 R2 (64-bit)
"Microsoft Team Foundation Server 2010 Object Model - ENU" = Microsoft Team Foundation Server 2010 Object Model - ENU
"Microsoft Team Foundation Server 2010 Object Model for Lightswitch 2011 - ENU_Lightswitch" = Microsoft Team Foundation Server 2010 Object Model (VSLS) - ENU
"Microsoft Visual Studio 2005 Remote Debugger (x64) - ENU" = Microsoft Visual Studio 2005 Remote Debugger (x64) - ENU
"Microsoft Visual Studio 2008 Remote Debugger - ENU" = Microsoft Visual Studio 2008 Remote Debugger - ENU
"Microsoft Visual Studio 2010 Tools for Office Runtime (x64)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x64)
"NVIDIA Drivers" = NVIDIA Drivers
"RealVNC_is1" = VNC Enterprise Edition E4.3.1
"Recuva" = Recuva
"SDKSetup_7.1.7600.0.30514" = Microsoft Windows SDK for Windows 7 (7.1)
"Ultravnc2_is1" = UltraVNC 1.0.8.2
"UltSounds" = Geluidsschema's voor Windows
"UltSounds2" = Ultimate Extras sounds from Microsoft® Tinker&#8482;
"VNCMirror_is1" = VNC Mirror Driver 1.7

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{000E79B7-E725-4F01-870A-C12942B7F8E4}" = Crysis(R)
"{001E7FB6-BB6B-4ED0-BEDC-B5404ED96D4E}" = DocProc
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4
"{021C4C4F-C93C-4425-BFFD-C2D16776BFAE}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4
"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4
"{07EF3970-F8E5-4A27-A5A3-230484D35026}" = Microsoft Expression Encoder 4
"{08C8666B-C502-4AB3-B4CB-D74AC42D14FE}" = Nero BackItUp 10 Help (CHM)
"{08D605B4-DCD1-451F-ABD7-52E6BB868E4E}" = Microsoft Expression Design 4
"{08F32589-5E39-42B8-8BC5-6A8126ED2A70}" = Microsoft Visual C++ 2008 Redistributable Package
"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler
"{0C19D563-5F25-4621-BF10-01F741BD283F}" = Microsoft SQL Server Compact 3.5 SP1 Design Tools English
"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4
"{0DDCEC37-369C-484B-B16D-B4413FD42FB9}" = Microsoft SQL Server 2008 R2 Data-Tier Application Framework
"{0DF3AE91-E533-3960-8516-B23737F8B7A2}" = Visual C++ 2008 x64 Runtime - (v9.0.30729)
"{0DF3AE91-E533-3960-8516-B23737F8B7A2}.vc_x64runtime_30729_01" = Visual C++ 2008 x64 Runtime - v9.0.30729.01
"{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}" = Microsoft Sync Framework SDK v1.0 SP1
"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4
"{112C23F2-C036-4D40-BED4-0CB47BF5555C}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU
"{14DD7530-CCD2-3798-B37D-3839ED6A441C}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{14F70205-1940-4000-88C7-BE799A6B2CAD}" = Adobe Soundbooth CS4
"{159A625F-5B09-4B98-A8B5-993396206193}" = Belgium e-ID middleware 3.5.3 Sdk (build 6193)
"{15BF7AAF-846C-4A6D-80E1-5D1FC7FB461B}" = Adobe SGM CS4
"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4
"{16987E99-C95C-4513-9239-7B44A0A71DB5}" = Nero SoundTrax 10 Help (CHM)
"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4
"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB
"{1803A630-3C38-4D2B-9B9A-0CB37243539C}" = Microsoft ASP.NET MVC 2
"{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}" = Microsoft Silverlight 4 SDK
"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
"{1A4052AB-BA77-44F7-8EE7-9F9131BFD7A6}" = OF Dragon Rising
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1B7C06E1-4888-47A6-992A-0990B9683486}" = Adobe Version Cue CS4 Server
"{1C997E1C-5CE9-4AF3-AAA9-DC65E6090827}" = Microsoft Expression Blend SDK for Silverlight 4
"{1DCA3EAA-6EB5-4563-A970-EA14D75037BA}" = Adobe InDesign CS4
"{1E04CB54-AF4E-4AC3-B4B7-C0A160BE57F1}" = Adobe InDesign CS4 Icon Handler
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7FB68F-52F6-46A3-B42F-38CE46295AE5}" = Nero MediaHub 10
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live - Hulpprogramma voor uploaden
"{2168245A-B5AD-40D8-A641-48E3E070B5B6}" = Adobe Flash CS4 STI-en
"{22025051-1991-48EB-8BE8-7A3329DAE7ED}" = IIS 7.5 Express
"{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk" = Google Talk (remove only)
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{22E23C71-C27A-3F30-8849-BB6129E50679}" = Visual C++ 2008 IA64 Runtime - (v9.0.30729)
"{22E23C71-C27A-3F30-8849-BB6129E50679}.vc_i64runtime_30729_01" = Visual C++ 2008 IA64 Runtime - v9.0.30729.01
"{237CCB62-8454-43E3-B158-3ACD0134852E}" = High-Definition Video Playback 10
"{23959E96-A80F-4172-A655-210E9BB7BFBE}" = MSDN Library for Visual Studio 2005
"{241F2BF7-69EB-42A4-9156-96B2426C7504}" = Microsoft SQL Server Compact 3.5 for Devices ENU
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{256E7DAC-9BE8-494E-8DE7-7857BF96B774}" = Microsoft Expression Blend 3 SDK
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{277C1559-4CF7-44FF-8D07-98AA9C13AABD}" = Nero Multimedia Suite 10
"{27B6D024-FD7E-4A88-BC17-5AFBE33EC072}" = Microsoft F# Runtime for Silverlight 4
"{282D8E32-68E8-4698-977E-12274D6BB8A5}" = Remote Support Manager
"{291B3A3B-F808-45B8-8113-DF232FCB6C82}" = Microsoft .NET Compact Framework 3.5
"{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8}" = Adobe CS4 American English Speech Analysis Models
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2B095022-00FF-45D5-8717-3A20DFCB8C6B}" = RIFT
"{2BAF2B96-7560-48B4-87D4-10178DDBE217}" = Adobe InDesign CS4 Application Feature Set Files (Roman)
"{2D9FEBEE-F1B7-344F-BFDF-760E18332D96}" = Microsoft Visual Studio 2010 SharePoint Developer Tools
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{2FA41EBB-3F5A-35C3-85D6-51EC72A11FBD}" = Google Gears
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1" = lightshot-2.5.0.0
"{30C8AA56-4088-426F-91D1-0EDFD3A25678}" = Adobe Dreamweaver CS4
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{31A559C1-9E4D-423B-9DD3-34A6C5398752}" = HTC BMP USB Driver
"{329411A0-19F3-4740-874F-17400B126F27}" = Nero Vision 10 Help (CHM)
"{32A3A4F4-B792-11D6-A78A-00B0D0160200}" = Java(TM) SE Development Kit 6 Update 20
"{33643918-7957-4839-92C7-EA96CB621A98}" = Nero Express 10 Help (CHM)
"{34490F4E-48D0-492E-8249-B48BECF0537C}" = Nero DiscSpeed 10
"{34AFBC0B-CE29-41D7-A21F-30DE838D9A00}" = NavGate FEEDS
"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4
"{370187B9-6964-38D0-851F-6C4898B0C2B1}" = Microsoft Visual C++ Compilers 2010 Standard - enu - x86
"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player
"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4
"{3A762A82-618D-3CAA-B847-D074ABFA0B2E}" = MSDN Library for Visual Studio 2008 - ENU
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3C11D2DA-6802-3F66-BE6B-B2C046AFE866}" = Visual C++ 2008 x64 Runtime - (v9.0.30729.4148)
"{3C11D2DA-6802-3F66-BE6B-B2C046AFE866}.vc_x64runtime_30729_4148" = Visual C++ 2008 x64 Runtime - v9.0.30729.4148
"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4
"{3D347E6D-5A03-4342-B5BA-6A771885F379}" = Autodesk Backburner 2008.1
"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin
"{3F8D9A47-9C50-3F46-8F12-B92DD5CA0A2E}" = Visual C++ 2008 x86 Runtime - (v9.0.30729.6161)
"{3F8D9A47-9C50-3F46-8F12-B92DD5CA0A2E}.vc_x86runtime_30729_6161" = Visual C++ 2008 x86 Runtime - v9.0.30729.6161
"{40416836-56CC-4C0E-A6AF-5C34BADCE483}" = Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools
"{428FDF9F-E010-4C4C-A8BB-156960AFCA1C}" = Adobe Fireworks CS4
"{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"{43509E18-076E-40FE-AF38-CA5ED400A5A9}" = Pixel Bender Toolkit
"{437AB8E0-FB69-4222-B280-A64F3DE22591}" = Microsoft Visual Studio 2005 Professional Edition - ENU
"{4402084F-61EE-48B2-AFCB-AC1EC2454C79}" = MySQL Server 5.1
"{44491DE3-AB05-4FAA-8F9E-698FAD7681FB}_is1" = DoBs
S

Svenvdb

Legacy Member
Extra Deel 4 :


"{44D4AF75-6870-41F5-9181-662EA05507E1}" = Microsoft Document Explorer 2005
"{44E240EC-2224-4078-A88B-2CEE0D3016EF}" = Adobe After Effects CS4 Presets
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{45EC816C-0771-4C14-AE6D-72D1B578F4C8}" = Adobe After Effects CS4
"{46261D03-1BC3-487C-B031-588D02E57D18}" = SSMS Tools Pack 2.1.0.0
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{4847BBB9-EADD-4C92-90BF-4223B0892FF6}" = Microsoft Flight Simulator X Service Pack 2
"{492BBE30-E09E-4663-825D-A20DFC45CA1E}" = hpg3800QFolder
"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension
"{498542FB-5593-419F-B9D6-A9F3783F7290}" = hpg3800
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A423411-E28A-4A13-BDB0-8E8BC42FFA29}" = HTC Sync
"{4A52555C-032A-4083-BDD9-6A85ABFB39A8}" = Adobe SING CS4
"{4C6D5779-A766-45DF-9938-D6F595A66F2B}" = Microsoft Expression Blend 4
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4ECF4BDC-8387-329A-ABE9-CF5798F84BB2}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{510D2239-6C2E-457B-9590-485EC552D94D}" = Garmin USB Drivers
"{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1" = Data Lifeguard Diagnostic for Windows 1.21
"{52232EF4-CC12-4C21-ABCF-ADB79618302D}" = Adobe Soundbooth CS4 Codecs
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4
"{558358E5-E4F3-4374-BA1D-26FF39EF87D9}" = Microsoft Silverlight Tools for Visual Studio 2010
"{561968FD-56A1-49FD-9ED0-F55482C7C5BC}" = Adobe Media Encoder CS4 Exporter
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{57B89E30-0BBA-4F20-9F2C-8E8CDE1CEDB6}" = DiRT
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{58AC967F-CE64-4065-AF54-FA66BAF31FE8}" = BOILING POINT
"{5A0B7BA5-4682-4273-81C2-69B17E649103}" = GRID
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5A3F6A80-7913-475E-8B96-477A952CFA43}" = SupportSoft Assisted Service
"{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}" = Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219
"{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4
"{5EE6E987-1B79-4A93-832B-27472C7D1579}" = WPF Toolkit February 2010 (Version 3.5.50211.1)
"{5F8D931D-B230-47F3-A9C0-0C8CA459A332}" = Microsoft Expression Web 4
"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support
"{61D6891E-E822-4448-9F9A-0AAAAEB6AF6C}" = Adobe Creative Suite 4 Master Collection
"{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}" = Microsoft ASP.NET Web Pages
"{63AA3EAB-23BB-48B2-9AD0-44F878075604}" = Nero 10 Menu TemplatePack Basic
"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4
"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{66049135-9659-4AAD-9169-9CCA269EBB3E}" = Nero InfoTool 10 Help (CHM)
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{66F0E678-69C2-4C46-BA95-117DF28C87E4}" = Microsoft WebMatrix
"{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D}" = Microsoft Document Explorer 2008
"{67A9747A-E1F5-4E9A-81CC-12B5D5B81B6E}" = Adobe After Effects CS4 Third Party Content
"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4
"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK
"{68A35043-C55A-4237-88C9-37EE1C63ED71}" = Microsoft Visual J# 2.0 Redistributable Package
"{68AB6930-5BFF-4FF6-923B-516A91984FE6}" = Nero BackItUp 10
"{6908A0A2-2B7C-403E-AC8C-79C3D6BA2E3D}" = Microsoft SQL Server 2008 R2 Report Builder 3.0
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6C531060-84FB-4F96-8F33-29DF020632EB}" = Microsoft .NET Compact Framework 1.0 SP3 Developer
"{6C94A234-CA2C-4D3C-81E6-6AAA8069825D}" = Garmin WebUpdater
"{6C9F6D23-E9AD-43C9-B43A-011562AAF876}" = Windows Mobile 5.0 SDK R2 for Pocket PC
"{6CDEAD7E-F8D8-37F7-AB6F-1E22716E30F3}" = Microsoft Visual Studio Macro Tools
"{6D6664A9-3342-4948-9B7E-034EFE366F0F}" = HTC Driver Installer
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{70312451-0D00-4A84-B9B1-0D59B5180A4F}" = Opera 10.53
"{70550193-1C22-445C-8FA4-564E155DB1A7}" = Nero Express 10
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7254D594-26B0-4285-949F-00EE7E614995}" = MVVM Light Toolkit
"{729A3000-BC8A-3B74-BA5D-5068FE12D70C}" = Microsoft Visual F# 2.0 Runtime
"{730837D4-FF5E-48DB-BA49-33E732DFF0B3}" = PanoStandAlone
"{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4
"{76C24F39-B161-498F-BD8B-C64789812D13}_is1" = ConvertXtoDVD 3.0.0.1
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{78B75C6D-E53C-424C-BF83-4B63BD4A6682}" = Microsoft Device Emulator version 1.0 - ENU
"{78C3657E-742C-40B1-9F53-E5A921D40F17}" = Microsoft SQL Server 2008 R2 Transact-SQL Language Service
"{793D1D88-6141-43DE-BE58-59BCE31B4090}" = Adobe Flash CS4 Extension - Flash Lite STI en
"{797D1DB3-BA0F-4A2D-9F99-5D2C09D0A7FE}" = Car Tycoon
"{7A295D8F-484B-4FFB-89AB-C1FD497591FE}" = Nero WaveEditor 10 Help (CHM)
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7B33F480-496D-334A-BAC2-205DEC0CBC2D}" = Visual C++ 2008 x86 Runtime - (v9.0.30729.4148)
"{7B33F480-496D-334A-BAC2-205DEC0CBC2D}.vc_x86runtime_30729_4148" = Visual C++ 2008 x86 Runtime - v9.0.30729.4148
"{7B4A5C13-069F-4AFE-AE57-C497B4E33C7E}" = Call of Duty(R) 2 Patch 1.3
"{7CC7BDD5-6F10-4724-96A1-EAC7D9F2831C}" = Adobe InDesign CS4 Common Base Files
"{7D95B533-4BA1-4EED-8096-EFCB6DD6B95F}" = AdventureWorksDB
"{8186FF34-D389-4B7E-9A2F-C197585BCFBD}" = Adobe Media Encoder CS4 Importer
"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4
"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4
"{83F2B8F4-5CF3-4BE9-9772-9543EAE4AC5F}" = Microsoft SQL Server 2008 R2 Management Objects
"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4
"{87532CAB-7932-4F84-8937-823337622807}" = Adobe Illustrator CS4
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169, 8168, 8101E and 8102E Ethernet Network Card Driver for Windows Vista
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89ADB24E-E3DE-4665-9513-CE68A7D7A4E6}" = RSTime Race Result
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{89FB030B-05F9-4421-9D90-8FF2BBA70FE7}_is1" = AXIS Camera Management 2.00
"{8C6027FD-53DC-446D-BB75-CACD7028A134}" = HP Update
"{8E770F99-CF23-4BF9-BF4E-E3A2924FEB27}" = Microsoft redistributable runtime DLLs VS2005 SP1(x86)
"{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}" = Nero Recode 10
"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime
"{90120000-0015-0413-0000-0000000FF1CE}" = Microsoft Office Access MUI (Dutch) 2007
"{90120000-0015-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0413-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Dutch) 2007
"{90120000-0016-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0413-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Dutch) 2007
"{90120000-0018-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0413-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Dutch) 2007
"{90120000-0019-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Dutch) 2007
"{90120000-001A-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0413-0000-0000000FF1CE}" = Microsoft Office Word MUI (Dutch) 2007
"{90120000-001B-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0413-0000-0000000FF1CE}" = Microsoft Office Proof (Dutch) 2007
"{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{D66D5A44-E480-4BA4-B4F2-C554F6B30EBB}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0021-0000-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer 2007
"{90120000-0021-0409-0000-0000000FF1CE}" = Microsoft Office Visual Web Developer MUI (English) 2007
"{90120000-0021-0409-0000-0000000FF1CE}_VisualWebDeveloper_{E1044ED2-E4AD-4B39-B500-31109750F6B4}" = Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0413-1000-0000000FF1CE}_ENTERPRISE_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0413-0000-0000000FF1CE}" = Microsoft Office Proofing (Dutch) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0044-0413-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Dutch) 2007
"{90120000-0044-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_VisualWebDeveloper_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0413-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Dutch) 2007
"{90120000-006E-0413-0000-0000000FF1CE}_ENTERPRISE_{89C8E56A-90D8-4598-B0E6-EB28F6270E07}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0413-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Dutch) 2007
"{90120000-00A1-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A4-0409-0000-0000000FF1CE}" = Microsoft Office 2003 Web Components
"{90120000-00BA-0413-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Dutch) 2007
"{90120000-00BA-0413-0000-0000000FF1CE}_ENTERPRISE_{DC387AA5-94A6-4920-B004-D59846526D81}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00D1-0409-0000-0000000FF1CE}" = Microsoft Office Access database engine 2007 (English)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_VisualWebDeveloper_{DE5A002D-8122-4278-A7EE-3121E7EA254E}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90510413-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003
"{92E25238-61A3-4ACD-A407-3C480EEF47A7}" = Nero RescueAgent 10 Help (CHM)
"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{9656F3AC-6BA9-43F0-ABED-F214B5DAB27B}" = Windows Mobile 5.0 SDK R2 for Smartphone
"{975951E7-14D0-49AF-A630-89680D12D7F6}" = Autodesk Material Library 2011 Medium Image library
"{98613C99-1399-416C-A07C-1EE1C585D872}" = SeaTools for Windows
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A33B83D-FFC4-44CF-BEEF-632DECEF2FCD}" = Microsoft SQL Server Database Publishing Wizard 1.3
"{9A4297F3-2A51-4ED9-92CA-4BCB8380947E}" = Nero Vision 10
"{9A6CAF6A-DD64-3372-B5A7-0982D750EEF0}" = Microsoft Visual Studio LightSwitch 2011 - ENU
"{9B3A1C97-A361-463E-8817-444F9F88CDFE}" = Microsoft Expression Blend SDK for .NET 4
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C916142-C18C-429D-BFED-40094A7E0BEB}" = The Settlers 7 - Paths to a Kingdom
"{9DEABCB6-B759-4D52-92F8-51B34A2B4D40}" = Autodesk Material Library 2011
"{A06FB736-BAB7-4503-8C24-0298D8182EE9}" = Milestone XProtect Smart Client 5.0d
"{A06FE62B-CEBC-4E94-AED8-92DCC33BC8EA}" = Microsoft Expression Studio 4
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A51500FE-6408-4305-B071-B961F691A4CE}" = Microsoft SQL Server Compact 4.0 Web Tools ENU
"{A6EC82A0-1414-475D-8AFD-469089F3080D}" = Adobe Contribute CS4
"{A785F79A-4381-437D-B3FA-A8252F9C85E0}" = Capitalism II
"{A8D93648-9F7F-407D-915C-62044644C3DA}" = MSI to redistribute MS VS2005 CRT libraries
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AADD1C8F-D59F-4D55-A726-768C71A205A8}" = Pinnacle Studio 14
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC41D924-8C68-4BD5-A7A1-0AE4176C31A6}" = Crystal Reports for Visual Studio
"{AC76BA86-1033-F400-7760-000000000004}" = Adobe Acrobat 9 Pro - English, Français, Deutsch
"{ACE28263-76A4-4BF5-B6F4-8BD719595969}" = Microsoft SQL Server Database Publishing Wizard 1.4
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}" = ubi.com
"{B05DE7B7-0B40-4411-BD4B-222CAE2D8F15}" = Adobe MotionPicture Color Files CS4
"{B15381DD-FF97-4FCD-A881-ED4DB0975500}" = Adobe Color Video Profiles AE CS4
"{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content
"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect
"{B2AE44CB-2AAB-4C08-A54B-D264BD604DA8}" = Citrix Presentation Server Client
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{B9F4561A-924D-4510-A85A-BB0960C338CB}" = Adobe Asset Services CS4
"{BA0C9AAF-1327-3F06-B49C-349B4BE8F740}" = Microsoft Visual Studio 2008 Shell (integrated mode) - ENU
"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed&#8482; SHIFT
"{BC0464FA-A0BA-3E38-85BF-DC5B3A401F48}" = Microsoft Visual Studio 2010 Ultimate - ENU
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter
"{BEE64C14-BEF1-4610-8A68-A16EAA47B882}" = Futuremark SystemInfo
"{BF127B80-CFD5-4379-9752-E8AF1A5D0141}" = Microsoft Expression Encoder 4 Screen Capture Codec
"{BF9BF038-FE03-429D-9B26-2FA0FD756052}" = Microsoft SQL Server Browser
"{C18A0418-442A-4186-AF98-D08F5054A2FC}" = Nero DiscSpeed 10 Help (CHM)
"{C20C2630-B3A7-44BA-BDD0-31E256AE490E}" = Windows Live Call
"{C3273C55-E1E4-41FF-8D69-0158090DB8D8}" = Nero CoverDesigner 10 Help (CHM)
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Dolby Files 10
"{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}" = Test Drive Unlimited
"{C3F6F200-6D7B-4879-B9EE-700C0CE1FCDA}" = Microsoft SQL Server System CLR Types
"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4
"{C82185E8-C27B-4EF4-2010-4444BC2C2B6D}" = Microsoft Streets & Trips 2010
"{C86E7C99-E4AD-79C7-375B-1AEF9A91EC2B}" = Acrobat.com
"{C938BE91-3BB5-4B84-9EF6-88F0505D0038}" = Adobe Premiere Pro CS4 Third Party Content
"{C9E270CC-AE42-4BD8-B9C6-1EB3A8657FF5}" = Just Cause 1.00.0000
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC38A00D-7EED-46CE-9281-D1D97B81F22A}" = Windows Live Messenger
"{CC419DDC-E0F0-4013-B25A-6FA036516F0D}" = Need for Speed&#8482; ProStreet
"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw
"{CD1E078C-A6B9-47DA-B035-6365C85C7832}" = Autodesk Material Library 2011 Base Image library
"{CE2121C6-C94D-4A73-8EA4-6943F33EE335}" = Picture Package Music Transfer
"{CE246151-F0E8-ABC8-AEB2-7F3E188EFBF5}" = TweetDeck
"{CEC0C2C2-921F-4EB8-8D7E-4F2F03ED02AA}" = ScannerCopy
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D21BC5B2-CBAC-48FA-A701-B5A63C1CA7B8}" = Microsoft SQL Server 2008 R2 Policies
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.4 Game
"{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4
"{D5068583-D569-468B-9755-5FBF5848F46F}" = Sony Picture Utility
"{D642E38E-0D24-486C-9A2D-E316DD696F4B}" = Microsoft XML Parser
"{D7DAD1E4-45F4-3B2B-899A-EA728167EC4F}" = Microsoft Visual Studio 2008 Professional Edition - ENU
"{D7FD752A-DDB9-4685-83FD-E20C7C59BD84}" = Mindjet MindManager 8
"{D873FA4B-C374-4F8A-8D9A-130DB56FAB16}" = America's Army
"{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}" = WCF RIA Services V1.0 SP1
"{DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}" = Nero Recode 10 Help (CHM)
"{DDFD8348-058C-4F4B-85E5-6D740D4AB3FE}" = Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU
"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4
"{E1EE5339-5D32-458F-BAAB-B19F6301BCE2}" = Nero SoundTrax 10
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E337E787-CF61-4B7B-B84F-509202A54023}" = Nero RescueAgent 10
"{E5AE9031-79A5-4627-9641-BEFA82819B08}" = Microsoft SQL Server 2008 R2 Data-Tier Application Project
"{E7E58A3A-D9BD-3D4B-9475-AE757454AD82}" = Visual C++ 2008 x64 Runtime - (v9.0.30729.6161)
"{E7E58A3A-D9BD-3D4B-9475-AE757454AD82}.vc_x64runtime_30729_6161" = Visual C++ 2008 x64 Runtime - v9.0.30729.6161
"{E8EE9410-8AC4-4F43-A626-DDECA75C79F3}" = Adobe Setup
"{EA710A0A-BF5D-433C-8EB5-D17DC54CC298}" = Microsoft Office Live Meeting 2007
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB5A3E9D-91CF-4C97-B816-72DE0625ACA3}" = Windows Live Essentials
"{ED0042CA-CBEA-4ADF-B262-FE0518AF2221}" = LogMeIn
"{EDCDFAD5-DF80-4600-A493-E9DAD6810230}" = Nero WaveEditor 10
"{EDDF99D9-9FE3-4871-A7DB-D1522C51EE9A}" = Microsoft .NET Compact Framework 2.0 SP2
"{EDEA8AB7-7683-4ED2-AA19-E6C078064C0D}" = Microsoft WSE 3.0
"{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help
"{F1A6D3A8-3456-380E-8212-BFF37C3AE69F}" = Microsoft Visual Studio 2010 SDK SP1
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F412B4AF-388C-4FF5-9B2F-33DB1C536953}" = Nero InfoTool 10
"{F467862A-D9CA-47ED-8D81-B4B3C9399272}" = Nero MediaHub 10 Help (CHM)
"{F5993FCC-DF5D-4879-B70D-AA1F379C5C6B}" = Microsoft Expression Web 4 Service Pack 2
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F6117F9C-ADB5-4590-9BE4-12C7BEC28702}" = Nero StartSmart 10 Help (CHM)
"{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}" = Nero StartSmart 10
"{F6249ABF-F16D-4AF3-8755-4D62F799C238}" = Google AdWords Editor
"{F6E99614-F042-4459-82B7-8B38B2601356}" = Adobe Flash CS4
"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4
"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4
"{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX
"{FB2A5FCC-B81B-48C2-A009-7804694D83E9}" = Adobe Encore CS4 Codecs
"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All
"{FCF00A6E-FB58-477A-ABE9-232907105521}" = Nero CoverDesigner 10
"{FF29527A-44CD-3422-945E-981A13584000}" = VC Runtimes MSI
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"037A6D4E-45B9-4B40-B271-0A0D3EAA9196_is1" = MicroSE Unite.MSE 0.6.0.1
"1381-5408-0515-7060" = RAIDar 4.3.0
"18 Wheels of Steel American Long Haul 1.00" = 18 Wheels of Steel American Long Haul 1.00
"ActiveScan 2.0" = Panda ActiveScan 2.0
"ActiveTouchMeetingClient" = Cisco WebEx Meetings
"Adobe AIR" = Adobe AIR
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Adobe_b2d6abde968e6f277ddbfd501383e02" = Adobe Creative Suite 4 Master Collection
"AlfaRetail" = AlfaRetail
"Any Video Converter Professional_is1" = Any Video Converter Professional 3.0.3
"ASIO4ALL" = ASIO4ALL
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.12 (Unicode)
"AutoGK" = Auto Gordian Knot 2.45
"AviSynth" = AviSynth 2.5
"AXIS Media Control Embedded" = AXIS Media Control Embedded
"Bagger-Simulator 2011" = Bagger-Simulator 2011
"Betfair Casino" = Betfair Casino
"Blend_4.0.20525.0" = Microsoft Expression Blend 4
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com
"Design_7.0.20516.0" = Microsoft Expression Design 4
"dlanconf" = devolo dLAN-configuratiewizard
"dslmon" = devolo Informer
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVD Identifier_is1" = DVD Identifier
"EADM" = EA Download Manager
"EaseUS Todo Backup Free 3.0_is1" = EaseUS Todo Backup Free 3.0
"Encoder_4.0.1639.0" = Microsoft Expression Encoder 4
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Entropia Universe" = Entropia Universe
"Entropia Universe10.0.0.28255" = Entropia Universe
"Euro Truck Simulator" = Euro Truck Simulator
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v4.50
"ExpressionStudio_4.0.20525.0" = Microsoft Expression Studio 4
"ExpressRip" = Express Rip
"Farming Simulator 2009 1.1" = Farming Simulator 2009 1.1
"FarmingSimulator2011EN_is1" = Farming Simulator 2011
"Fiddler2" = Fiddler2
"FIFA MANAGER 12" = FIFA MANAGER 12
"FileZilla Client" = FileZilla Client 3.5.3
"Football Manager 2011" = Football Manager 2011
"Foxit Reader" = Foxit Reader
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.15.1228
"ft_Transport Tycoon Deluxe" = Transport Tycoon Deluxe
"GFWL_{434D0831-3E0C-4D03-A5D4-5E1000008400}" = F1 2010
"giants_editor_4.1.2_is1" = GIANTS Editor 4.1.2
"GnuCash_is1" = GnuCash 2.4.10
"Google Updater" = Google Updater
"GrabIt_is1" = GrabIt 1.7.2 Beta 4 (build 997)
"h3viewerXX_is1" = H3Viewer by Helpware Home Page
"HD Tune Pro_is1" = HD Tune Pro 3.00
"HijackThis" = HijackThis 2.0.2
"ImgBurn" = ImgBurn
"IMM4 Codec_is1" = IMM4 VCM Codec 1.0.0.10
"InstallShield_{2B095022-00FF-45D5-8717-3A20DFCB8C6B}" = RIFT
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"InstallShield_{D0A05794-48C2-4424-A15A-9F20FCFDD374}" = Call of Duty(R) 2
"JDownloader" = JDownloader
"JStock" = JStock (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.8.3 (Full)
"LAME for Audacity_is1" = LAME v3.98.3 for Audacity
"LiveReg" = LiveReg (Symantec Corporation)
"Mafia II_is1" = Mafia II
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versie 1.61.0.1400
"Messenger Plus!" = Messenger Plus! 5
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft Document Explorer 2005" = Microsoft Document Explorer 2005
"Microsoft Document Explorer 2008" = Microsoft Document Explorer 2008
"Microsoft Report Viewer Redistributable 2008 (KB971119)" = Microsoft Report Viewer Redistributable 2008 SP1
"Microsoft Visual J# 2.0 Redistributable Package" = Microsoft Visual J# 2.0 Redistributable Package
"Microsoft Visual Studio 2005 Professional Edition - ENU" = Microsoft Visual Studio 2005 Professional Edition - ENU
"Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office tweede editie runtime
"Microsoft Visual Studio 2008 Professional Edition - ENU" = Microsoft Visual Studio 2008 Professional Edition - ENU
"Microsoft Visual Studio 2010 Ultimate - ENU" = Microsoft Visual Studio 2010 Ultimate - ENU
"Microsoft Visual Studio LightSwitch 2011 - ENU" = Microsoft Visual Studio LightSwitch 2011 - ENU
"Microsoft Visual Studio Macro Tools" = Microsoft Visual Studio Macro Tools
"mIRC" = mIRC
"MozBackup_is1" = MozBackup 1.4.7
"Mozilla Firefox 11.0 (x86 nl)" = Mozilla Firefox 11.0 (x86 nl)
"Mozilla Thunderbird 12.0.1 (x86 nl)" = Mozilla Thunderbird 12.0.1 (x86 nl)
"MSDN Library for Visual Studio 2005" = MSDN Library for Visual Studio 2005
"MSDN Library for Visual Studio 2008 - ENU" = MSDN Library for Visual Studio 2008 - ENU
"nbi-glassfish-mod-3.0.1.22.0" = GlassFish Server Open Source Edition 3.0.1
"nbi-nb-base-6.9.0.0.0" = NetBeans IDE 6.9
"Notepad++" = Notepad++
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OCCT_is1" = OCCT Perestroika 1.1.1b
"Off-linediensten van Home'Bank_is1" = Off-linediensten van Home'Bank 5.20
"OpenAL" = OpenAL
"OpenTTD" = OpenTTD 1.1.3
"PC Wizard 2008_is1" = PC Wizard 2008.1.85.2
"PC-Drukkerij Visitekaartjes" = PC-Drukkerij Visitekaartjes
"PDFCreator Toolbar" = PDFCreator Toolbar
"PDF-XChange 3_is1" = PDF-XChange 3
"Photo Tool" = Photo Tool
"PhpStorm 2.1.5" = JetBrains PhpStorm 2.1.5
"POIbase_is1" = POIbase 1.029
"PoiZone" = PoiZone
"Pro Cycling Manager 2011_is1" = Pro Cycling Manager - Seizoen 2011 versie 1.0.0.0
"PunkBusterSvc" = PunkBuster Services
"QuickPar" = QuickPar 0.9
"RealPlayer 6.0" = RealPlayer
"Real-Time Racing_is1" = Real-Time Racing
"rFactor" = rFactor (remove only)
"Server Impulse Agent_is1" = Server Impulse Agent
"Sitecom MD-020 SIM Editor software_is1" = Sitecom MD-020 SIM Editor
"SopCast" = SopCast 3.0.1
"SP1_9527A496-5DF9-412A-ADC7-168BA5379CA6" = Microsoft Flight Simulator X Service Pack 1
"SpeedFan" = SpeedFan (remove only)
"ST6UNST #1" = SubSync
"ST6UNST #3" = VbVision
"Streamster" = Marketiva
"SubDownloader2" = SubDownloader2
"SubtitleWorkshop" = Subtitle Workshop 2.51
"Super Flexible File Synchronizer_is1" = Super Flexible File Synchronizer 6 Beta 78
"Tanker Truck Simulator 2011_is1" = Tanker Truck Simulator 2011
"TeamViewer 5" = TeamViewer 5
"TeamViewer 6" = TeamViewer 6
"TightVNC" = TightVNC 2.0.4
"Toxic Biohazard" = Toxic Biohazard
"Trader Workstation 4.0" = Trader Workstation 4.0
"TreeSize Free_is1" = TreeSize Free V2.7
"Trucks & Trailers" = Trucks & Trailers 1.00
"True DBGrid Pro 6.0" = APEX True DBGrid Pro 6.0
"TV3D65_is1" = TV3D SDK 6.5 Prerelease
"TweakNow RegCleaner Standard_is1" = TweakNow RegCleaner Standard
"TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1" = TweetDeck
"UK Truck Simulator" = UK Truck Simulator 1.02
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VirtualCloneDrive" = VirtualCloneDrive
"Visual Basic 6.0 Enterprise Edition" = Microsoft Visual Basic 6.0 Enterprise Edition
"Visual CertExam Suite_is1" = Visual CertExam Suite 1.9
"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime
"VisualWebDeveloper" = Microsoft Visual Studio Web Authoring Component
"VLC media player" = VLC media player 1.0.1
"VobSub" = VobSub v2.23 (Remove Only)
"WampServer 2_is1" = WampServer 2.2
"Web_4.0.1303.0" = Microsoft Expression Web 4
"WebPost" = Microsoft Web Publishing Wizard 1.53
"WhatPulse" = WhatPulse 1.6.2.1
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPcapInst" = WinPcap 4.1 beta2
"WinRAR archiver" = WinRAR archiver
"winscp3_is1" = WinSCP 4.2.7
"Woopra 1.2" = Woopra 1.2

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"5f48e2ab41c5d005" = RapidShare Manager
"d940d96a9c64d4f2" = Entropia Tracker Suite
"Dropbox" = Dropbox
"Google Chrome" = Google Chrome
"Netlog Video Tool" = Netlog Video Tool
"Spotify" = Spotify
"UnityWebPlayer" = Unity Web Player
S

Svenvdb

Legacy Member
Extra Deel 5:





========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 2/06/2012 3:10:24 | Computer Name = HoofdPc | Source = WinVNC4 | ID = 1
Description = TcpListenerManager: not listening on IPv4: unable to create listening
socket: Elk socketadres (protocol/netwerkadres/poort) kan normaal slechts ??n keer
worden gebruikt. (10048)

Error - 2/06/2012 12:46:04 | Computer Name = HoofdPc | Source = WinVNC4 | ID = 1
Description = TcpListenerManager: not listening on IPv4: unable to create listening
socket: Elk socketadres (protocol/netwerkadres/poort) kan normaal slechts ??n keer
worden gebruikt. (10048)

Error - 2/06/2012 12:46:04 | Computer Name = HoofdPc | Source = WinVNC4 | ID = 1
Description = TcpListenerManager: not listening on IPv4: unable to create listening
socket: Elk socketadres (protocol/netwerkadres/poort) kan normaal slechts ??n keer
worden gebruikt. (10048)

Error - 2/06/2012 12:46:04 | Computer Name = HoofdPc | Source = WinVNC4 | ID = 1
Description = TcpListenerManager: not listening on IPv4: unable to create listening
socket: Elk socketadres (protocol/netwerkadres/poort) kan normaal slechts ??n keer
worden gebruikt. (10048)

Error - 2/06/2012 12:46:20 | Computer Name = HoofdPc | Source = Report Server Windows Service (SQLEXPRESS2008) | ID = 120
Description = The report server cannot decrypt the symmetric key. Most likely, the
service account or password has changed. To continue, run rsconfig.exe to update
the report server account information.\r\n

Error - 2/06/2012 12:48:36 | Computer Name = HoofdPc | Source = Perflib | ID = 1010
Description =

Error - 2/06/2012 12:48:42 | Computer Name = HoofdPc | Source = Perflib | ID = 1008
Description =

Error - 3/06/2012 0:46:40 | Computer Name = HoofdPc | Source = Report Server Windows Service (SQLEXPRESS2008) | ID = 120
Description = The report server cannot decrypt the symmetric key. Most likely, the
service account or password has changed. To continue, run rsconfig.exe to update
the report server account information.\r\n

Error - 3/06/2012 12:47:07 | Computer Name = HoofdPc | Source = Report Server Windows Service (SQLEXPRESS2008) | ID = 120
Description = The report server cannot decrypt the symmetric key. Most likely, the
service account or password has changed. To continue, run rsconfig.exe to update
the report server account information.\r\n

Error - 3/06/2012 12:51:31 | Computer Name = HoofdPc | Source = Perflib | ID = 1010
Description =

[ Cobian Backup Boletus VSC Service Events ]
Error - 30/11/2010 18:27:32 | Computer Name = HoofdPc | Source = Cobian Backup Boletus VSC Service | ID = 0
Description = Er is een time-out opgetreden voor de bewerking.

Error - 1/12/2010 15:35:38 | Computer Name = HoofdPc | Source = Cobian Backup Boletus VSC Service | ID = 0
Description = Er is een time-out opgetreden voor de bewerking.

Error - 6/12/2010 3:07:08 | Computer Name = HoofdPc | Source = Cobian Backup Boletus VSC Service | ID = 0
Description = The creation of a shadow copy is already in progress.

[ Media Center Events ]
Error - 16/04/2008 2:36:16 | Computer Name = HoofdPc | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: downloaden van pakket MCESpotlight
is mislukt.

Error - 16/04/2008 16:15:47 | Computer Name = HoofdPc | Source = MCUpdate | ID = 0
Description = DownloadPackgeTask.SubTasksComplete: downloaden van pakket MCESpotlight
is mislukt.

[ OSession Events ]
Error - 24/02/2008 12:59:37 | Computer Name = HoofdPc | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 18409
seconds with 1860 seconds of active time. This session ended with a crash.

Error - 29/05/2010 13:43:36 | Computer Name = HoofdPc | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6504.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 30
seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 3/06/2012 13:06:55 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:06:59 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:07:02 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:07:06 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:07:10 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:07:15 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 13:07:19 | Computer Name = HoofdPc | Source = disk | ID = 262151
Description = Beschadigd blok in apparaat \Device\Harddisk0\DR0.

Error - 3/06/2012 16:11:18 | Computer Name = HoofdPc | Source = Service Control Manager | ID = 7031
Description =

Error - 3/06/2012 16:11:29 | Computer Name = HoofdPc | Source = Service Control Manager | ID = 7031
Description =

Error - 3/06/2012 16:11:44 | Computer Name = HoofdPc | Source = Service Control Manager | ID = 7032
Description =


< End of report >
S

Svenvdb

Legacy Member
OTL Deel 1:

OTL logfile created on: 3/06/2012 23:18:28 - Run 1
OTL by OldTimer - Version 3.2.46.0 Folder = C:\Users\Sven Van den brande\Desktop
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

4,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 35,31% Memory free
8,19 Gb Paging File | 3,75 Gb Available in Paging File | 45,78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 54,20 Gb Free Space | 11,64% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 89,37 Gb Free Space | 19,19% Space Free | Partition Type: NTFS
Drive W: | 4625,64 Gb Total Space | 1055,50 Gb Free Space | 22,82% Space Free | Partition Type: NTFS
Drive Z: | 929,46 Gb Total Space | 84,31 Gb Free Space | 9,07% Space Free | Partition Type: NTFS

Computer Name: HOOFDPC | User Name: Sven Van den brande | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/06/03 23:01:42 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Sven Van den brande\Desktop\OTL.com
PRC - [2012/05/04 13:23:10 | 000,177,152 | ---- | M] (Skillbrains) -- C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\2.5.0.0\LightShot.exe
PRC - [2012/04/02 11:22:50 | 014,357,888 | ---- | M] (Super Flexible Software) -- C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe
PRC - [2012/03/24 04:14:08 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler.exe
PRC - [2012/03/23 14:25:24 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2012/02/27 14:43:07 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2012/02/15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011/09/20 22:50:32 | 003,196,800 | ---- | M] (Super Flexible Software Ltd. & Co. KG) -- C:\Program Files (x86)\SuperFlexible\ExtremeVSS.exe
PRC - [2011/08/06 00:52:46 | 000,060,040 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe
PRC - [2011/08/03 15:23:54 | 000,828,944 | ---- | M] (GlavSoft LLC.) -- C:\Program Files (x86)\TightVNC\tvnserver.exe
PRC - [2010/11/30 19:08:30 | 007,464,232 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
PRC - [2010/11/30 19:08:30 | 002,222,376 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2010/11/30 18:46:38 | 000,099,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\tv_w32.exe
PRC - [2010/10/19 14:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
PRC - [2010/08/12 08:21:22 | 002,060,288 | ---- | M] (Belgian Government) -- C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe
PRC - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010/03/12 00:21:23 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010/03/10 02:38:18 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
PRC - [2009/09/04 21:37:40 | 006,041,600 | ---- | M] () -- C:\Program Files (x86)\Zend\MySQL51\bin\mysqld.exe
PRC - [2009/08/17 01:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009/04/08 22:51:34 | 002,814,976 | ---- | M] (WhatPulse.org) -- C:\Program Files (x86)\WhatPulse\WhatPulse.exe
PRC - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/11/14 03:35:22 | 000,037,656 | ---- | M] (Mindjet) -- C:\Program Files (x86)\Mindjet\MindManager 8\MmReminderService.exe
PRC - [2008/09/16 04:09:54 | 000,081,920 | ---- | M] (Realtime Soft Ltd) -- C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
PRC - [2008/06/11 22:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
PRC - [2007/12/24 02:26:32 | 002,641,920 | ---- | M] (pdfforge pdfforge.org | The free PDF Creator and Converter) -- C:\Program Files (x86)\PDFCreator\PDFCreator.exe
PRC - [2007/10/25 16:37:32 | 002,178,832 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe
PRC - [2007/10/25 16:33:22 | 000,563,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2007/10/25 16:32:58 | 000,407,824 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
PRC - [2007/10/19 13:18:48 | 000,113,176 | ---- | M] (Logitech Inc.) -- c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe


========== Modules (No Company Name) ==========

MOD - [2012/05/28 16:29:33 | 004,075,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\VsDebugPresentation#\bbf4a773f13d21bd58cdf4e7a0ddf379\VsDebugPresentationPackage.ni.dll
MOD - [2012/05/28 16:24:08 | 000,203,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e712877ecd021cf26fda1fd5fa51eab8\Microsoft.VisualStudio.TeamArchitect.ModelingProject.ni.dll
MOD - [2012/05/28 16:21:28 | 000,051,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3e192de8a7dd275f633068cec777b39e\Microsoft.VisualStudio.Platform.AppDomainManager.ni.dll
MOD - [2012/05/28 16:21:15 | 002,718,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7e7d8a9449d77a496d4994ad06028720\Microsoft.VisualStudio.Shell.10.0.ni.dll
MOD - [2012/05/28 16:20:39 | 000,792,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7acc9f44fd71d1d6386b44e35af41d76\Microsoft.VisualStudio.ExtensibilityHosting.ni.dll
MOD - [2012/05/28 16:19:31 | 001,168,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4990920fb353bf9feb3f5199430f968d\Microsoft.VisualStudio.CommonIDE.ni.dll
MOD - [2012/05/28 13:04:14 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\dac2093a24d7582eaee5ebd24ba1d06a\WindowsBase.ni.dll
MOD - [2012/05/28 12:44:52 | 013,197,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\71109720564155295fbaaff1202a33c0\System.Windows.Forms.ni.dll
MOD - [2012/05/28 12:44:47 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\3e4f9b3b78f0f13b7469a14e69d756ef\System.Core.ni.dll
MOD - [2012/05/28 12:44:42 | 001,665,536 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5be779e4d55a04c3b86644505facbe9a\System.Drawing.ni.dll
MOD - [2012/05/28 12:44:39 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\9cf67ed1b743fbc3dd6b78fbc0595236\System.ni.dll
MOD - [2012/05/28 12:44:33 | 014,413,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\1bdf7de454340e0ea9fc455aeaec49d9\mscorlib.ni.dll
MOD - [2012/05/23 03:55:35 | 000,553,496 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\libglesv2.dll
MOD - [2012/05/23 03:55:33 | 000,117,784 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\libegl.dll
MOD - [2012/05/23 03:06:23 | 008,743,584 | ---- | M] () -- C:\Users\SVENVA~1\AppData\Local\Google\Chrome\APPLIC~1\190108~1.52\gcswf32.dll
MOD - [2012/05/23 03:06:23 | 008,743,584 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
MOD - [2012/01/08 15:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2011/08/07 14:54:16 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\Detour32.dll
MOD - [2009/08/14 16:05:40 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\imageformats\qjpeg4.dll
MOD - [2009/08/14 15:53:52 | 007,495,680 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\QtGui4.dll
MOD - [2009/08/14 15:32:24 | 001,961,984 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\QtCore4.dll
MOD - [2008/11/14 03:34:46 | 000,115,968 | ---- | M] () -- C:\Program Files (x86)\Mindjet\MindManager 8\zlib.dll
MOD - [2007/11/28 19:59:42 | 003,702,784 | ---- | M] () -- C:\Program Files (x86)\PDFCreator\GS8.61\gs8.61\Bin\gsdll32.dll
MOD - [2007/10/25 16:41:10 | 000,106,768 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\LAppRes.DLL
MOD - [2007/10/25 16:37:32 | 002,178,832 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe
MOD - [2007/10/25 16:35:04 | 000,149,264 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiVOIPDevicePlugin.dll
MOD - [2007/10/25 16:34:42 | 000,165,136 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiCordless4001.dll
MOD - [2007/10/25 16:34:42 | 000,138,000 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiCordless.dll
MOD - [2007/10/25 16:33:44 | 000,167,184 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\EFVal.dll
MOD - [2007/10/25 16:33:34 | 000,344,336 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\DevMngr.dll
MOD - [2007/10/25 16:33:22 | 000,563,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
MOD - [2007/10/19 13:17:40 | 000,068,120 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LVCOMSER\LVCSPS.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/09/22 21:06:04 | 000,431,464 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS) SQL Server Agent (SQLEXPRESS)
SRV:64bit: - [2011/07/10 19:42:03 | 000,551,896 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01)
SRV:64bit: - [2011/04/01 21:17:08 | 000,067,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe -- (MsDepSvc)
SRV:64bit: - [2011/03/22 21:45:38 | 001,436,424 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2010/04/03 11:00:10 | 000,428,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE -- (SQLSERVERAGENT) SQL Server Agent (MSSQLSERVER)
SRV:64bit: - [2010/04/03 11:00:10 | 000,428,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS2008\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS2008) SQL Server Agent (SQLEXPRESS2008)
SRV:64bit: - [2010/04/03 11:00:08 | 000,059,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe -- (MSSQLServerADHelper100)
SRV:64bit: - [2010/03/10 02:38:18 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe -- (mi-raysat_3dsmax2011_64)
SRV:64bit: - [2008/07/29 14:20:28 | 004,737,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
SRV:64bit: - [2008/01/19 10:06:50 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2008/01/19 10:02:17 | 000,088,064 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
SRV:64bit: - [2008/01/19 10:02:04 | 000,067,072 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
SRV:64bit: - [2008/01/19 10:00:52 | 000,195,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2007/10/19 13:20:42 | 000,171,032 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher)
SRV:64bit: - [2007/10/19 13:18:36 | 000,182,296 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV:64bit: - [2007/10/19 13:17:04 | 000,255,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVCOMSER\LVCSer64.exe -- (LVCOMSer)
SRV:64bit: - [2007/08/14 23:07:52 | 001,262,320 | ---- | M] (RealVNC Ltd.) [Auto | Running] -- C:\Program Files\RealVNC\VNC4\winvnc4.exe -- (WinVNC4)
SRV:64bit: - [2005/09/23 04:26:42 | 004,476,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon80)
SRV - [2012/05/05 02:40:54 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/03/23 14:25:24 | 000,087,040 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011/09/26 18:16:22 | 000,147,336 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2011/09/26 18:16:16 | 000,375,176 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2011/09/26 12:17:16 | 009,665,536 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe -- (wampmysqld)
SRV - [2011/09/26 12:06:54 | 000,021,504 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\Apache2.2.21\bin\httpd.exe -- (wampapache)
SRV - [2011/09/20 22:50:32 | 003,196,800 | ---- | M] (Super Flexible Software Ltd. & Co. KG) [Auto | Running] -- C:\Program Files (x86)\SuperFlexible\ExtremeVSS.exe -- (ExtremeVSSService)
SRV - [2011/08/06 00:52:46 | 000,060,040 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Auto | Running] -- C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe -- (EaseUS Agent)
SRV - [2011/08/03 15:23:54 | 000,828,944 | ---- | M] (GlavSoft LLC.) [Auto | Running] -- C:\Program Files (x86)\TightVNC\tvnserver.exe -- (tvnserver)
SRV - [2011/04/17 15:27:28 | 000,043,008 | ---- | M] (Server Impulse) [Auto | Running] -- C:\Program Files (x86)\Server Impulse Agent\AgentService.exe -- (Server Impulse Agent Service)
SRV - [2011/03/16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/02/04 00:29:00 | 000,073,728 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\afasrv64.exe -- (AfaService)
SRV - [2010/11/30 19:08:30 | 002,222,376 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/11/08 13:04:18 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2010/10/19 14:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/12 00:21:23 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010/02/21 01:05:18 | 000,373,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2009/09/25 16:44:14 | 000,059,104 | ---- | M] (ScriptLogic Corporation) [Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAMaint.exe -- (DAMaint)
SRV - [2009/09/25 16:42:16 | 001,717,984 | ---- | M] (ScriptLogic Corporation) [Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DesktopAuthority.exe -- (RemoteSupportManager)
SRV - [2009/09/04 21:37:40 | 006,041,600 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Zend\MySQL51\bin\mysqld.exe -- (MySQL_ZendServer51)
SRV - [2009/08/17 01:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009/06/21 12:30:47 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/04/11 08:28:17 | 000,052,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2009/03/30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/03/30 06:39:54 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2008/08/15 05:46:20 | 000,284,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4)
SRV - [2008/01/19 09:34:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
SRV - [2007/11/14 21:41:34 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/02/29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/12/19 14:45:22 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011/09/26 18:17:08 | 000,087,456 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2011/09/22 21:01:54 | 000,311,144 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\RsFx0105.sys -- (RsFx0105)
DRV:64bit: - [2011/08/06 00:52:40 | 000,189,576 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EuFdDisk.sys -- (EUFDDISK)
DRV:64bit: - [2011/08/06 00:52:38 | 000,050,312 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EUBKMON.sys -- (EUBKMON)
DRV:64bit: - [2011/08/06 00:52:32 | 000,019,592 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\eudskacs.sys -- (EUDSKACS)
DRV:64bit: - [2011/08/06 00:52:30 | 000,044,680 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\eubakup.sys -- (EUBAKUP)
DRV:64bit: - [2011/08/04 18:32:46 | 000,059,184 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\uimx64.sys -- (UimBus)
DRV:64bit: - [2011/08/04 18:32:44 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\Uim_IMx64.sys -- (Uim_IM)
DRV:64bit: - [2011/08/04 18:32:44 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\uim_vimx64.sys -- (Uim_VIM)
DRV:64bit: - [2011/07/10 19:42:08 | 003,852,976 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV:64bit: - [2011/01/23 19:05:58 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\BackupReader.sys -- (BackupReader)
DRV:64bit: - [2010/06/25 16:08:56 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010/06/23 09:21:34 | 000,318,568 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2010/04/03 10:30:40 | 000,313,696 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\RsFx0150.sys -- (RsFx0150)
DRV:64bit: - [2009/12/18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009/12/02 13:20:56 | 000,137,608 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\EuDisk.sys -- (EuDisk)
DRV:64bit: - [2009/10/22 19:56:34 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt)
DRV:64bit: - [2009/10/22 19:56:33 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009/10/01 02:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009/09/25 16:45:04 | 000,011,488 | ---- | M] (ScriptLogic Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\DAmirr.sys -- (DAmirr)
DRV:64bit: - [2009/08/09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VClone.sys -- (VClone)
DRV:64bit: - [2009/07/15 08:02:17 | 000,294,232 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\vmm.sys -- (vmm)
DRV:64bit: - [2009/06/10 00:46:06 | 000,031,744 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/05/08 11:08:00 | 000,020,520 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)
DRV:64bit: - [2009/05/06 07:40:55 | 000,871,408 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009/04/11 07:34:05 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\usbccid.sys -- (USBCCID)
DRV:64bit: - [2009/04/11 06:54:21 | 000,299,008 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\udfs.sys -- (udfs)
DRV:64bit: - [2008/10/17 20:54:56 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2008/09/12 15:41:46 | 000,062,800 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\VBoxTAP.sys -- (VBoxTAP)
DRV:64bit: - [2008/06/27 07:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:64bit: - [2008/06/19 17:24:32 | 000,033,792 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\pavboot64.sys -- (pavboot)
DRV:64bit: - [2008/05/27 15:13:38 | 000,059,136 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\MHIKEY10x64.sys -- (MHIKEY10)
DRV:64bit: - [2008/04/22 08:53:36 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ENTECH64.sys -- (ENTECH64)
DRV:64bit: - [2008/02/28 15:31:08 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2008/02/26 21:40:35 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2008/02/06 03:00:00 | 000,054,480 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2008/01/19 09:11:31 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2008/01/19 08:37:47 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ws2ifsl.sys -- (ws2ifsl)
DRV:64bit: - [2008/01/19 08:34:08 | 000,048,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\avc.sys -- (Avc)
DRV:64bit: - [2008/01/19 08:34:06 | 000,058,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\61883.sys -- (61883)
DRV:64bit: - [2008/01/19 08:34:04 | 000,061,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\msdv.sys -- (MSDV)
DRV:64bit: - [2008/01/19 08:28:10 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sermouse.sys -- (sermouse)
DRV:64bit: - [2007/11/14 21:42:32 | 000,034,832 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2007/10/19 13:16:08 | 001,599,896 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LVcKap64.sys -- (LVcKap64)
DRV:64bit: - [2007/10/12 02:00:22 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
DRV:64bit: - [2007/10/12 01:56:34 | 000,582,680 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LV561V64.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV:64bit: - [2007/10/11 18:58:28 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2007/10/11 18:58:16 | 002,055,192 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LVMVDrv.sys -- (LVMVDrv)
DRV:64bit: - [2007/08/14 16:15:58 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\vncmirror.sys -- (vncmirror)
DRV:64bit: - [2007/01/29 07:20:34 | 000,079,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VMNetSrv.sys -- (VPCNetS2)
S

Svenvdb

Legacy Member
OTL Deel 1:

OTL logfile created on: 3/06/2012 23:18:28 - Run 1
OTL by OldTimer - Version 3.2.46.0 Folder = C:\Users\Sven Van den brande\Desktop
64bit-Windows Vista Ultimate Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

4,00 Gb Total Physical Memory | 1,41 Gb Available Physical Memory | 35,31% Memory free
8,19 Gb Paging File | 3,75 Gb Available in Paging File | 45,78% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 54,20 Gb Free Space | 11,64% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 89,37 Gb Free Space | 19,19% Space Free | Partition Type: NTFS
Drive W: | 4625,64 Gb Total Space | 1055,50 Gb Free Space | 22,82% Space Free | Partition Type: NTFS
Drive Z: | 929,46 Gb Total Space | 84,31 Gb Free Space | 9,07% Space Free | Partition Type: NTFS

Computer Name: HOOFDPC | User Name: Sven Van den brande | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/06/03 23:01:42 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Sven Van den brande\Desktop\OTL.com
PRC - [2012/05/04 13:23:10 | 000,177,152 | ---- | M] (Skillbrains) -- C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\2.5.0.0\LightShot.exe
PRC - [2012/04/02 11:22:50 | 014,357,888 | ---- | M] (Super Flexible Software) -- C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe
PRC - [2012/03/24 04:14:08 | 000,180,648 | ---- | M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.111\GoogleCrashHandler.exe
PRC - [2012/03/23 14:25:24 | 000,087,040 | ---- | M] () -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
PRC - [2012/02/27 14:43:07 | 000,801,792 | ---- | M] (Yuna Software) -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2012/02/15 01:03:14 | 024,246,216 | ---- | M] (Dropbox, Inc.) -- C:\Users\Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011/09/20 22:50:32 | 003,196,800 | ---- | M] (Super Flexible Software Ltd. & Co. KG) -- C:\Program Files (x86)\SuperFlexible\ExtremeVSS.exe
PRC - [2011/08/06 00:52:46 | 000,060,040 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) -- C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe
PRC - [2011/08/03 15:23:54 | 000,828,944 | ---- | M] (GlavSoft LLC.) -- C:\Program Files (x86)\TightVNC\tvnserver.exe
PRC - [2010/11/30 19:08:30 | 007,464,232 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer.exe
PRC - [2010/11/30 19:08:30 | 002,222,376 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2010/11/30 18:46:38 | 000,099,624 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\tv_w32.exe
PRC - [2010/10/19 14:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
PRC - [2010/08/12 08:21:22 | 002,060,288 | ---- | M] (Belgian Government) -- C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe
PRC - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) -- C:\Program Files (x86)\Nero\Update\NASvc.exe
PRC - [2010/03/12 00:21:23 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe
PRC - [2010/03/10 02:38:18 | 000,086,016 | ---- | M] () -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe
PRC - [2009/09/04 21:37:40 | 006,041,600 | ---- | M] () -- C:\Program Files (x86)\Zend\MySQL51\bin\mysqld.exe
PRC - [2009/08/17 01:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009/04/08 22:51:34 | 002,814,976 | ---- | M] (WhatPulse.org) -- C:\Program Files (x86)\WhatPulse\WhatPulse.exe
PRC - [2009/01/26 16:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2008/11/14 03:35:22 | 000,037,656 | ---- | M] (Mindjet) -- C:\Program Files (x86)\Mindjet\MindManager 8\MmReminderService.exe
PRC - [2008/09/16 04:09:54 | 000,081,920 | ---- | M] (Realtime Soft Ltd) -- C:\Program Files (x86)\Common Files\Realtime Soft\RTSHookInterop\x32\RTSHookInterop.exe
PRC - [2008/06/11 22:43:26 | 000,640,376 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
PRC - [2007/12/24 02:26:32 | 002,641,920 | ---- | M] (pdfforge pdfforge.org | The free PDF Creator and Converter) -- C:\Program Files (x86)\PDFCreator\PDFCreator.exe
PRC - [2007/10/25 16:37:32 | 002,178,832 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe
PRC - [2007/10/25 16:33:22 | 000,563,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
PRC - [2007/10/25 16:32:58 | 000,407,824 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LQCVFX\COCIManager.exe
PRC - [2007/10/19 13:18:48 | 000,113,176 | ---- | M] (Logitech Inc.) -- c:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\LVPrS64H.exe


========== Modules (No Company Name) ==========

MOD - [2012/05/28 16:29:33 | 004,075,008 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\VsDebugPresentation#\bbf4a773f13d21bd58cdf4e7a0ddf379\VsDebugPresentationPackage.ni.dll
MOD - [2012/05/28 16:24:08 | 000,203,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\e712877ecd021cf26fda1fd5fa51eab8\Microsoft.VisualStudio.TeamArchitect.ModelingProject.ni.dll
MOD - [2012/05/28 16:21:28 | 000,051,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\3e192de8a7dd275f633068cec777b39e\Microsoft.VisualStudio.Platform.AppDomainManager.ni.dll
MOD - [2012/05/28 16:21:15 | 002,718,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7e7d8a9449d77a496d4994ad06028720\Microsoft.VisualStudio.Shell.10.0.ni.dll
MOD - [2012/05/28 16:20:39 | 000,792,576 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\7acc9f44fd71d1d6386b44e35af41d76\Microsoft.VisualStudio.ExtensibilityHosting.ni.dll
MOD - [2012/05/28 16:19:31 | 001,168,384 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\Microsoft.VisualStu#\4990920fb353bf9feb3f5199430f968d\Microsoft.VisualStudio.CommonIDE.ni.dll
MOD - [2012/05/28 13:04:14 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\dac2093a24d7582eaee5ebd24ba1d06a\WindowsBase.ni.dll
MOD - [2012/05/28 12:44:52 | 013,197,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\71109720564155295fbaaff1202a33c0\System.Windows.Forms.ni.dll
MOD - [2012/05/28 12:44:47 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\3e4f9b3b78f0f13b7469a14e69d756ef\System.Core.ni.dll
MOD - [2012/05/28 12:44:42 | 001,665,536 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\5be779e4d55a04c3b86644505facbe9a\System.Drawing.ni.dll
MOD - [2012/05/28 12:44:39 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\9cf67ed1b743fbc3dd6b78fbc0595236\System.ni.dll
MOD - [2012/05/28 12:44:33 | 014,413,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\1bdf7de454340e0ea9fc455aeaec49d9\mscorlib.ni.dll
MOD - [2012/05/23 03:55:35 | 000,553,496 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\libglesv2.dll
MOD - [2012/05/23 03:55:33 | 000,117,784 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\libegl.dll
MOD - [2012/05/23 03:06:23 | 008,743,584 | ---- | M] () -- C:\Users\SVENVA~1\AppData\Local\Google\Chrome\APPLIC~1\190108~1.52\gcswf32.dll
MOD - [2012/05/23 03:06:23 | 008,743,584 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
MOD - [2012/01/08 15:41:12 | 000,093,696 | ---- | M] () -- C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
MOD - [2011/08/07 14:54:16 | 000,004,096 | ---- | M] () -- C:\Program Files (x86)\Yuna Software\Messenger Plus!\Detour32.dll
MOD - [2009/08/14 16:05:40 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\imageformats\qjpeg4.dll
MOD - [2009/08/14 15:53:52 | 007,495,680 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\QtGui4.dll
MOD - [2009/08/14 15:32:24 | 001,961,984 | ---- | M] () -- C:\Program Files (x86)\Belgium Identity Card\QtCore4.dll
MOD - [2008/11/14 03:34:46 | 000,115,968 | ---- | M] () -- C:\Program Files (x86)\Mindjet\MindManager 8\zlib.dll
MOD - [2007/11/28 19:59:42 | 003,702,784 | ---- | M] () -- C:\Program Files (x86)\PDFCreator\GS8.61\gs8.61\Bin\gsdll32.dll
MOD - [2007/10/25 16:41:10 | 000,106,768 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\LAppRes.DLL
MOD - [2007/10/25 16:37:32 | 002,178,832 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe
MOD - [2007/10/25 16:35:04 | 000,149,264 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiVOIPDevicePlugin.dll
MOD - [2007/10/25 16:34:42 | 000,165,136 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiCordless4001.dll
MOD - [2007/10/25 16:34:42 | 000,138,000 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\LogiCordless.dll
MOD - [2007/10/25 16:33:44 | 000,167,184 | ---- | M] () -- C:\Program Files (x86)\Logitech\QuickCam\EFVal.dll
MOD - [2007/10/25 16:33:34 | 000,344,336 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\DevMngr.dll
MOD - [2007/10/25 16:33:22 | 000,563,984 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
MOD - [2007/10/19 13:17:40 | 000,068,120 | ---- | M] () -- C:\Program Files (x86)\Common Files\LogiShrd\LVCOMSER\LVCSPS.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2012/03/26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012/03/26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2011/09/22 21:06:04 | 000,431,464 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS) SQL Server Agent (SQLEXPRESS)
SRV:64bit: - [2011/07/10 19:42:03 | 000,551,896 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\SysNative\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01)
SRV:64bit: - [2011/04/01 21:17:08 | 000,067,400 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe -- (MsDepSvc)
SRV:64bit: - [2011/03/22 21:45:38 | 001,436,424 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64)
SRV:64bit: - [2010/04/03 11:00:10 | 000,428,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE -- (SQLSERVERAGENT) SQL Server Agent (MSSQLSERVER)
SRV:64bit: - [2010/04/03 11:00:10 | 000,428,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS2008\MSSQL\Binn\SQLAGENT.EXE -- (SQLAgent$SQLEXPRESS2008) SQL Server Agent (SQLEXPRESS2008)
SRV:64bit: - [2010/04/03 11:00:08 | 000,059,744 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- c:\Program Files\Microsoft SQL Server\100\Shared\sqladhlp.exe -- (MSSQLServerADHelper100)
SRV:64bit: - [2010/03/10 02:38:18 | 000,086,016 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\3ds Max 2011\mentalimages\satellite\raysat_3dsmax2011_64server.exe -- (mi-raysat_3dsmax2011_64)
SRV:64bit: - [2008/07/29 14:20:28 | 004,737,024 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon90)
SRV:64bit: - [2008/01/19 10:06:50 | 000,383,544 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV:64bit: - [2008/01/19 10:02:17 | 000,088,064 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\mprdim.dll -- (RemoteAccess)
SRV:64bit: - [2008/01/19 10:02:04 | 000,067,072 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysNative\Mcx2Svc.dll -- (Mcx2Svc)
SRV:64bit: - [2008/01/19 10:00:52 | 000,195,584 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2007/10/19 13:20:42 | 000,171,032 | ---- | M] (Logitech Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\logishrd\SrvLnch\SrvLnch.exe -- (LVSrvLauncher)
SRV:64bit: - [2007/10/19 13:18:36 | 000,182,296 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe -- (LVPrcS64)
SRV:64bit: - [2007/10/19 13:17:04 | 000,255,000 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files\Common Files\logishrd\LVCOMSER\LVCSer64.exe -- (LVCOMSer)
SRV:64bit: - [2007/08/14 23:07:52 | 001,262,320 | ---- | M] (RealVNC Ltd.) [Auto | Running] -- C:\Program Files\RealVNC\VNC4\winvnc4.exe -- (WinVNC4)
SRV:64bit: - [2005/09/23 04:26:42 | 004,476,096 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x64\msvsmon.exe -- (msvsmon80)
SRV - [2012/05/05 02:40:54 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/03/23 14:25:24 | 000,087,040 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe -- (PassThru Service)
SRV - [2011/09/26 18:16:22 | 000,147,336 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\ramaint.exe -- (LMIMaint)
SRV - [2011/09/26 18:16:16 | 000,375,176 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LMIGuardianSvc.exe -- (LMIGuardianSvc)
SRV - [2011/09/26 12:17:16 | 009,665,536 | ---- | M] () [On_Demand | Stopped] -- c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe -- (wampmysqld)
SRV - [2011/09/26 12:06:54 | 000,021,504 | ---- | M] (Apache Software Foundation) [On_Demand | Stopped] -- c:\wamp\bin\apache\Apache2.2.21\bin\httpd.exe -- (wampapache)
SRV - [2011/09/20 22:50:32 | 003,196,800 | ---- | M] (Super Flexible Software Ltd. & Co. KG) [Auto | Running] -- C:\Program Files (x86)\SuperFlexible\ExtremeVSS.exe -- (ExtremeVSSService)
SRV - [2011/08/06 00:52:46 | 000,060,040 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Auto | Running] -- C:\Program Files (x86)\EASEUS\Todo Backup\bin\Agent.exe -- (EaseUS Agent)
SRV - [2011/08/03 15:23:54 | 000,828,944 | ---- | M] (GlavSoft LLC.) [Auto | Running] -- C:\Program Files (x86)\TightVNC\tvnserver.exe -- (tvnserver)
SRV - [2011/04/17 15:27:28 | 000,043,008 | ---- | M] (Server Impulse) [Auto | Running] -- C:\Program Files (x86)\Server Impulse Agent\AgentService.exe -- (Server Impulse Agent Service)
SRV - [2011/03/16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/02/04 00:29:00 | 000,073,728 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\afasrv64.exe -- (AfaService)
SRV - [2010/11/30 19:08:30 | 002,222,376 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010/11/08 13:04:18 | 000,407,424 | ---- | M] (LogMeIn, Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe -- (LogMeIn)
SRV - [2010/10/19 14:29:03 | 002,011,944 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5)
SRV - [2010/03/25 14:39:22 | 000,490,280 | ---- | M] (Nero AG) [Auto | Running] -- C:\Program Files (x86)\Nero\Update\NASvc.exe -- (NAUpdate) @C:\Program Files (x86)
SRV - [2010/03/18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010/03/12 00:21:23 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA)
SRV - [2010/02/21 01:05:18 | 000,373,760 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll -- (WAS)
SRV - [2009/09/25 16:44:14 | 000,059,104 | ---- | M] (ScriptLogic Corporation) [Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAMaint.exe -- (DAMaint)
SRV - [2009/09/25 16:42:16 | 001,717,984 | ---- | M] (ScriptLogic Corporation) [Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DesktopAuthority.exe -- (RemoteSupportManager)
SRV - [2009/09/04 21:37:40 | 006,041,600 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Zend\MySQL51\bin\mysqld.exe -- (MySQL_ZendServer51)
SRV - [2009/08/17 01:32:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009/06/21 12:30:47 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009/04/11 08:28:17 | 000,052,224 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll -- (AppHostSvc)
SRV - [2009/03/30 06:42:14 | 000,066,368 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009/03/30 06:39:54 | 000,089,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64)
SRV - [2008/08/15 05:46:20 | 000,284,016 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe -- (Adobe Version Cue CS4)
SRV - [2008/01/19 09:34:53 | 000,068,608 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess)
SRV - [2007/11/14 21:41:34 | 000,092,792 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files (x86)\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/03/20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012/02/29 15:52:46 | 000,016,384 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011/12/19 14:45:22 | 000,146,736 | ---- | M] (Oracle Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VBoxNetAdp.sys -- (VBoxNetAdp)
DRV:64bit: - [2011/09/26 18:17:08 | 000,087,456 | ---- | M] (LogMeIn, Inc.) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\LMIRfsClientNP.dll -- (LMIRfsClientNP)
DRV:64bit: - [2011/09/22 21:01:54 | 000,311,144 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\RsFx0105.sys -- (RsFx0105)
DRV:64bit: - [2011/08/06 00:52:40 | 000,189,576 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\EuFdDisk.sys -- (EUFDDISK)
DRV:64bit: - [2011/08/06 00:52:38 | 000,050,312 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\EUBKMON.sys -- (EUBKMON)
DRV:64bit: - [2011/08/06 00:52:32 | 000,019,592 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\eudskacs.sys -- (EUDSKACS)
DRV:64bit: - [2011/08/06 00:52:30 | 000,044,680 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\eubakup.sys -- (EUBAKUP)
DRV:64bit: - [2011/08/04 18:32:46 | 000,059,184 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | System | Stopped] -- C:\Windows\SysNative\DRIVERS\uimx64.sys -- (UimBus)
DRV:64bit: - [2011/08/04 18:32:44 | 000,572,336 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\Uim_IMx64.sys -- (Uim_IM)
DRV:64bit: - [2011/08/04 18:32:44 | 000,352,816 | ---- | M] (Paragon) [Kernel | System | Stopped] -- C:\Windows\SysNative\Drivers\uim_vimx64.sys -- (Uim_VIM)
DRV:64bit: - [2011/07/10 19:42:08 | 003,852,976 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV:64bit: - [2011/01/23 19:05:58 | 000,063,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\BackupReader.sys -- (BackupReader)
DRV:64bit: - [2010/06/25 16:08:56 | 000,036,928 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\htcnprot.sys -- (htcnprot)
DRV:64bit: - [2010/06/23 09:21:34 | 000,318,568 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys -- (RTL8169)
DRV:64bit: - [2010/04/03 10:30:40 | 000,313,696 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\RsFx0150.sys -- (RsFx0150)
DRV:64bit: - [2009/12/18 00:25:17 | 000,034,472 | ---- | M] (Elaborate Bytes AG) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\ElbyCDIO.sys -- (ElbyCDIO)
DRV:64bit: - [2009/12/02 13:20:56 | 000,137,608 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\EuDisk.sys -- (EuDisk)
DRV:64bit: - [2009/10/22 19:56:34 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\atksgt.sys -- (atksgt)
DRV:64bit: - [2009/10/22 19:56:33 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\DRIVERS\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2009/10/01 02:51:42 | 000,046,592 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\wpdusb.sys -- (WpdUsb)
DRV:64bit: - [2009/09/25 16:45:04 | 000,011,488 | ---- | M] (ScriptLogic Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\DAmirr.sys -- (DAmirr)
DRV:64bit: - [2009/08/09 23:25:45 | 000,036,352 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VClone.sys -- (VClone)
DRV:64bit: - [2009/07/15 08:02:17 | 000,294,232 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\Drivers\vmm.sys -- (vmm)
DRV:64bit: - [2009/06/10 00:46:06 | 000,031,744 | ---- | M] (HTC, Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\ANDROIDUSB.sys -- (HTCAND64)
DRV:64bit: - [2009/05/08 11:08:00 | 000,020,520 | ---- | M] (GARMIN Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\grmnusb.sys -- (grmnusb)
DRV:64bit: - [2009/05/06 07:40:55 | 000,871,408 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\Drivers\sptd.sys -- (sptd)
DRV:64bit: - [2009/04/11 07:34:05 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\usbccid.sys -- (USBCCID)
DRV:64bit: - [2009/04/11 06:54:21 | 000,299,008 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\SysNative\DRIVERS\udfs.sys -- (udfs)
DRV:64bit: - [2008/10/17 20:54:56 | 000,072,216 | ---- | M] (LogMeIn, Inc.) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\LMIRfsDriver.sys -- (LMIRfsDriver)
DRV:64bit: - [2008/09/12 15:41:46 | 000,062,800 | ---- | M] (Sun Microsystems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\VBoxTAP.sys -- (VBoxTAP)
DRV:64bit: - [2008/06/27 07:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs)
DRV:64bit: - [2008/06/19 17:24:32 | 000,033,792 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\pavboot64.sys -- (pavboot)
DRV:64bit: - [2008/05/27 15:13:38 | 000,059,136 | ---- | M] (Generic USB smartcard reader) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\Drivers\MHIKEY10x64.sys -- (MHIKEY10)
DRV:64bit: - [2008/04/22 08:53:36 | 000,012,744 | R--- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\ENTECH64.sys -- (ENTECH64)
DRV:64bit: - [2008/02/28 15:31:08 | 000,011,552 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\lmimirr.sys -- (lmimirr)
DRV:64bit: - [2008/02/26 21:40:35 | 000,082,816 | ---- | M] (VSO Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\Drivers\pcouffin.sys -- (pcouffin)
DRV:64bit: - [2008/02/06 03:00:00 | 000,054,480 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\Drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2008/01/19 09:11:31 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\WSDPrint.sys -- (WSDPrintDevice)
DRV:64bit: - [2008/01/19 08:37:47 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ws2ifsl.sys -- (ws2ifsl)
DRV:64bit: - [2008/01/19 08:34:08 | 000,048,768 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\avc.sys -- (Avc)
DRV:64bit: - [2008/01/19 08:34:06 | 000,058,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\61883.sys -- (61883)
DRV:64bit: - [2008/01/19 08:34:04 | 000,061,568 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\msdv.sys -- (MSDV)
DRV:64bit: - [2008/01/19 08:28:10 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sermouse.sys -- (sermouse)
DRV:64bit: - [2007/11/14 21:42:32 | 000,034,832 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\npf.sys -- (NPF)
DRV:64bit: - [2007/10/19 13:16:08 | 001,599,896 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LVcKap64.sys -- (LVcKap64)
DRV:64bit: - [2007/10/12 02:00:22 | 000,050,072 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LVUSBS64.sys -- (LVUSBS64)
DRV:64bit: - [2007/10/12 01:56:34 | 000,582,680 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LV561V64.SYS -- (PID_0928) Logitech QuickCam Express(PID_0928)
DRV:64bit: - [2007/10/11 18:58:28 | 000,030,232 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\LVPr2M64.sys -- (LVPr2M64)
DRV:64bit: - [2007/10/11 18:58:16 | 002,055,192 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\DRIVERS\LVMVDrv.sys -- (LVMVDrv)
DRV:64bit: - [2007/08/14 16:15:58 | 000,004,608 | ---- | M] (RealVNC Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\vncmirror.sys -- (vncmirror)
DRV:64bit: - [2007/01/29 07:20:34 | 000,079,760 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\VMNetSrv.sys -- (VPCNetS2)
S

Svenvdb

Legacy Member
OTL Deel 2:


DRV:64bit: - [2006/11/02 14:04:02 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV:64bit: - [2006/11/02 14:03:56 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas.sys -- (LSI_SAS)
DRV:64bit: - [2006/11/02 14:03:56 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_fc.sys -- (LSI_FC)
DRV:64bit: - [2006/11/02 14:03:49 | 000,076,392 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\arcsas.sys -- (arcsas)
DRV:64bit: - [2006/11/02 14:03:49 | 000,076,392 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\arc.sys -- (arc)
DRV:64bit: - [2006/11/02 14:03:44 | 000,074,856 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sisraid4.sys -- (SiSRaid4)
DRV:64bit: - [2006/11/02 14:03:03 | 000,051,816 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nfrd960.sys -- (nfrd960)
DRV:64bit: - [2006/11/02 14:02:52 | 000,049,256 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\symc8xx.sys -- (Symc8xx)
DRV:64bit: - [2006/11/02 14:02:51 | 000,048,232 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
DRV:64bit: - [2006/11/02 14:02:47 | 000,048,232 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sym_u3.sys -- (Sym_u3)
DRV:64bit: - [2006/11/02 14:02:39 | 000,044,648 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iirsp.sys -- (iirsp)
DRV:64bit: - [2006/11/02 14:02:37 | 000,044,648 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sym_hi.sys -- (Sym_hi)
DRV:64bit: - [2006/11/02 14:02:37 | 000,043,112 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hpcisss.sys -- (HpCISSs)
DRV:64bit: - [2006/11/02 14:02:33 | 000,042,600 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sisraid2.sys -- (SiSRaid2)
DRV:64bit: - [2006/11/02 14:02:24 | 000,039,016 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\mraid35x.sys -- (Mraid35x)
DRV:64bit: - [2006/11/02 14:02:09 | 000,037,480 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iteraid.sys -- (iteraid)
DRV:64bit: - [2006/11/02 14:02:09 | 000,037,480 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iteatapi.sys -- (iteatapi)
DRV:64bit: - [2006/11/02 14:01:58 | 000,033,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\i2omp.sys -- (i2omp)
DRV:64bit: - [2006/11/02 14:01:55 | 000,032,872 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\megasas.sys -- (megasas)
DRV:64bit: - [2006/11/02 14:01:30 | 000,024,680 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
DRV:64bit: - [2006/11/02 14:01:16 | 000,021,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wd.sys -- (Wd)
DRV:64bit: - [2006/11/02 14:01:10 | 000,021,096 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\isapnp.sys -- (isapnp)
DRV:64bit: - [2006/11/02 14:01:03 | 000,021,096 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\compbatt.sys -- (Compbatt)
DRV:64bit: - [2006/11/02 14:00:48 | 000,018,024 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cmdide.sys -- (cmdide)
DRV:64bit: - [2006/11/02 14:00:41 | 000,018,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\viaide.sys -- (viaide)
DRV:64bit: - [2006/11/02 14:00:34 | 000,016,488 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\intelide.sys -- (intelide)
DRV:64bit: - [2006/11/02 14:00:33 | 000,015,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\amdide.sys -- (amdide)
DRV:64bit: - [2006/11/02 14:00:19 | 000,015,976 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\aliide.sys -- (aliide)
DRV:64bit: - [2006/11/02 13:52:27 | 000,990,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ql2300.sys -- (ql2300)
DRV:64bit: - [2006/11/02 13:52:16 | 000,485,480 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adp94xx.sys -- (adp94xx)
DRV:64bit: - [2006/11/02 13:52:07 | 000,368,232 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\elxstor.sys -- (elxstor)
DRV:64bit: - [2006/11/02 13:51:59 | 000,339,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpahci.sys -- (adpahci)
DRV:64bit: - [2006/11/02 13:51:49 | 000,279,656 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\uliahci.sys -- (uliahci)
DRV:64bit: - [2006/11/02 13:51:48 | 000,280,680 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iastorv.sys -- (iaStorV)
DRV:64bit: - [2006/11/02 13:51:30 | 000,203,368 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\pcmcia.sys -- (pcmcia)
DRV:64bit: - [2006/11/02 13:51:24 | 000,184,424 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpu160m.sys -- (adpu160m)
DRV:64bit: - [2006/11/02 13:51:19 | 000,178,792 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpu320.sys -- (adpu320)
DRV:64bit: - [2006/11/02 13:51:19 | 000,174,696 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ulsata2.sys -- (ulsata2)
DRV:64bit: - [2006/11/02 13:50:54 | 000,148,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ulsata.sys -- (UlSata)
DRV:64bit: - [2006/11/02 13:50:37 | 000,128,104 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\vsmraid.sys -- (vsmraid)
DRV:64bit: - [2006/11/02 13:50:27 | 000,124,008 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ql40xx.sys -- (ql40xx)
DRV:64bit: - [2006/11/02 13:50:24 | 000,112,744 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
DRV:64bit: - [2006/11/02 13:50:17 | 000,097,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
DRV:64bit: - [2006/11/02 13:50:10 | 000,093,800 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
DRV:64bit: - [2006/11/02 13:50:06 | 000,090,216 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
DRV:64bit: - [2006/11/02 13:50:06 | 000,088,168 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\djsvs.sys -- (aic78xx)
DRV:64bit: - [2006/11/02 12:27:53 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbprint.sys -- (usbprint)
DRV:64bit: - [2006/11/02 11:44:02 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\bthmodem.sys -- (BTHMODEM)
DRV:64bit: - [2006/11/02 11:44:01 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hidbth.sys -- (HidBth)
DRV:64bit: - [2006/11/02 11:43:46 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbcir.sys -- (usbcir) eHome Infrared Receiver (USBCIR)
DRV:64bit: - [2006/11/02 11:43:45 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\circlass.sys -- (circlass)
DRV:64bit: - [2006/11/02 11:43:40 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
DRV:64bit: - [2006/11/02 11:43:36 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hidir.sys -- (HidIr)
DRV:64bit: - [2006/11/02 11:40:24 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wacompen.sys -- (WacomPen)
DRV:64bit: - [2006/11/02 11:38:24 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfloppy.sys -- (sfloppy)
DRV:64bit: - [2006/11/02 11:38:18 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sffdisk.sys -- (sffdisk)
DRV:64bit: - [2006/11/02 11:22:41 | 000,077,824 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ipmidrv.sys -- (IPMIDRV)
DRV:64bit: - [2006/11/02 11:09:58 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wmiacpi.sys -- (WmiAcpi)
DRV:64bit: - [2006/11/02 11:00:15 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\amdk8.sys -- (AmdK8)
DRV:64bit: - [2006/11/02 11:00:15 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\processr.sys -- (Processor)
DRV:64bit: - [2006/11/02 10:43:25 | 000,086,528 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV:64bit: - [2006/09/18 23:30:18 | 000,047,104 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brserwdm.sys -- (BrSerWdm)
DRV:64bit: - [2006/09/18 23:30:18 | 000,014,976 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV:64bit: - [2005/09/23 23:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\MarvinBus64.sys -- (MarvinBus)
DRV - [2009/12/02 13:20:58 | 000,017,800 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2009/12/02 13:20:56 | 000,030,600 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2009/09/25 16:45:12 | 000,015,584 | ---- | M] (ScriptLogic Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAtf.sys -- (DAtf)
DRV - [2009/09/25 16:45:00 | 000,016,096 | ---- | M] (ScriptLogic Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAinfo.sys -- (DAInfo)
DRV - [2009/07/17 21:42:34 | 000,028,656 | ---- | M] (Systems Internals) [Kernel | On_Demand | Stopped] -- C:\SysinternalsSuite\PORTMSYS.SYS -- (PORTMON)
DRV - [2009/07/13 17:57:04 | 000,034,048 | ---- | M] (CACE Technologies) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\npf_devolo.sys -- (NPF_devolo) NetGroup Packet Filter Driver (devolo)
DRV - [2008/08/14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
DRV - [2008/03/17 01:00:00 | 000,021,120 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 -- (EverestDriver)
DRV - [2008/02/28 15:31:50 | 000,015,928 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2006/11/02 00:50:52 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\WimFltr.sys -- (WimFltr)
DRV - [2004/06/22 16:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64)
DRV - [2002/03/19 10:29:16 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\Pclepci.sys -- (PCLEPCI)
DRV - [1998/05/07 00:00:00 | 000,000,111 | ---- | M] () [Adapter | On_Demand | Unknown] -- C:\Windows\SysWow64\WINSOCK.SRG -- (Winsock)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes,DefaultScope = {17F7A6D4-0C47-49A0-BE35-7E66941BD4DB}
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{17F7A6D4-0C47-49A0-BE35-7E66941BD4DB}: "URL" = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz=
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}: "URL" = http://search.pdfcreator-toolbar.org/search?p=Q&ts=ne&w={searchTerms}&csrc=search-field
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://www.daemon-search.com/search?q={searchTerms}
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.46: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Sven Van den brande\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Sven Van den brande\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sven Van den brande\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files (x86)\Google\Google Gears\Firefox\ [2010/04/16 19:55:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Fiddler2\FiddlerHook [2012/02/12 19:51:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/31 20:50:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.8\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
S

Svenvdb

Legacy Member
OTL Deel 2:


DRV:64bit: - [2006/11/02 14:04:02 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV:64bit: - [2006/11/02 14:03:56 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas.sys -- (LSI_SAS)
DRV:64bit: - [2006/11/02 14:03:56 | 000,078,440 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\lsi_fc.sys -- (LSI_FC)
DRV:64bit: - [2006/11/02 14:03:49 | 000,076,392 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\arcsas.sys -- (arcsas)
DRV:64bit: - [2006/11/02 14:03:49 | 000,076,392 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\arc.sys -- (arc)
DRV:64bit: - [2006/11/02 14:03:44 | 000,074,856 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sisraid4.sys -- (SiSRaid4)
DRV:64bit: - [2006/11/02 14:03:03 | 000,051,816 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nfrd960.sys -- (nfrd960)
DRV:64bit: - [2006/11/02 14:02:52 | 000,049,256 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\symc8xx.sys -- (Symc8xx)
DRV:64bit: - [2006/11/02 14:02:51 | 000,048,232 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nvstor.sys -- (nvstor)
DRV:64bit: - [2006/11/02 14:02:47 | 000,048,232 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sym_u3.sys -- (Sym_u3)
DRV:64bit: - [2006/11/02 14:02:39 | 000,044,648 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iirsp.sys -- (iirsp)
DRV:64bit: - [2006/11/02 14:02:37 | 000,044,648 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sym_hi.sys -- (Sym_hi)
DRV:64bit: - [2006/11/02 14:02:37 | 000,043,112 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hpcisss.sys -- (HpCISSs)
DRV:64bit: - [2006/11/02 14:02:33 | 000,042,600 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sisraid2.sys -- (SiSRaid2)
DRV:64bit: - [2006/11/02 14:02:24 | 000,039,016 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\mraid35x.sys -- (Mraid35x)
DRV:64bit: - [2006/11/02 14:02:09 | 000,037,480 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iteraid.sys -- (iteraid)
DRV:64bit: - [2006/11/02 14:02:09 | 000,037,480 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iteatapi.sys -- (iteatapi)
DRV:64bit: - [2006/11/02 14:01:58 | 000,033,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\i2omp.sys -- (i2omp)
DRV:64bit: - [2006/11/02 14:01:55 | 000,032,872 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\megasas.sys -- (megasas)
DRV:64bit: - [2006/11/02 14:01:30 | 000,024,680 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\msahci.sys -- (msahci)
DRV:64bit: - [2006/11/02 14:01:16 | 000,021,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wd.sys -- (Wd)
DRV:64bit: - [2006/11/02 14:01:10 | 000,021,096 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\isapnp.sys -- (isapnp)
DRV:64bit: - [2006/11/02 14:01:03 | 000,021,096 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\compbatt.sys -- (Compbatt)
DRV:64bit: - [2006/11/02 14:00:48 | 000,018,024 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\cmdide.sys -- (cmdide)
DRV:64bit: - [2006/11/02 14:00:41 | 000,018,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\viaide.sys -- (viaide)
DRV:64bit: - [2006/11/02 14:00:34 | 000,016,488 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\intelide.sys -- (intelide)
DRV:64bit: - [2006/11/02 14:00:33 | 000,015,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\amdide.sys -- (amdide)
DRV:64bit: - [2006/11/02 14:00:19 | 000,015,976 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\aliide.sys -- (aliide)
DRV:64bit: - [2006/11/02 13:52:27 | 000,990,312 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ql2300.sys -- (ql2300)
DRV:64bit: - [2006/11/02 13:52:16 | 000,485,480 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adp94xx.sys -- (adp94xx)
DRV:64bit: - [2006/11/02 13:52:07 | 000,368,232 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\elxstor.sys -- (elxstor)
DRV:64bit: - [2006/11/02 13:51:59 | 000,339,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpahci.sys -- (adpahci)
DRV:64bit: - [2006/11/02 13:51:49 | 000,279,656 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\uliahci.sys -- (uliahci)
DRV:64bit: - [2006/11/02 13:51:48 | 000,280,680 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\iastorv.sys -- (iaStorV)
DRV:64bit: - [2006/11/02 13:51:30 | 000,203,368 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\pcmcia.sys -- (pcmcia)
DRV:64bit: - [2006/11/02 13:51:24 | 000,184,424 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpu160m.sys -- (adpu160m)
DRV:64bit: - [2006/11/02 13:51:19 | 000,178,792 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\adpu320.sys -- (adpu320)
DRV:64bit: - [2006/11/02 13:51:19 | 000,174,696 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ulsata2.sys -- (ulsata2)
DRV:64bit: - [2006/11/02 13:50:54 | 000,148,072 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ulsata.sys -- (UlSata)
DRV:64bit: - [2006/11/02 13:50:37 | 000,128,104 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\vsmraid.sys -- (vsmraid)
DRV:64bit: - [2006/11/02 13:50:27 | 000,124,008 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ql40xx.sys -- (ql40xx)
DRV:64bit: - [2006/11/02 13:50:24 | 000,112,744 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\nvraid.sys -- (nvraid)
DRV:64bit: - [2006/11/02 13:50:17 | 000,097,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\msdsm.sys -- (msdsm)
DRV:64bit: - [2006/11/02 13:50:10 | 000,093,800 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\mpio.sys -- (mpio)
DRV:64bit: - [2006/11/02 13:50:06 | 000,090,216 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sbp2port.sys -- (sbp2port)
DRV:64bit: - [2006/11/02 13:50:06 | 000,088,168 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\djsvs.sys -- (aic78xx)
DRV:64bit: - [2006/11/02 12:27:53 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbprint.sys -- (usbprint)
DRV:64bit: - [2006/11/02 11:44:02 | 000,050,688 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\bthmodem.sys -- (BTHMODEM)
DRV:64bit: - [2006/11/02 11:44:01 | 000,034,304 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hidbth.sys -- (HidBth)
DRV:64bit: - [2006/11/02 11:43:46 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbcir.sys -- (usbcir) eHome Infrared Receiver (USBCIR)
DRV:64bit: - [2006/11/02 11:43:45 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\circlass.sys -- (circlass)
DRV:64bit: - [2006/11/02 11:43:40 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\usbohci.sys -- (usbohci)
DRV:64bit: - [2006/11/02 11:43:36 | 000,025,600 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\hidir.sys -- (HidIr)
DRV:64bit: - [2006/11/02 11:40:24 | 000,026,624 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wacompen.sys -- (WacomPen)
DRV:64bit: - [2006/11/02 11:38:24 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfloppy.sys -- (sfloppy)
DRV:64bit: - [2006/11/02 11:38:18 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sffdisk.sys -- (sffdisk)
DRV:64bit: - [2006/11/02 11:22:41 | 000,077,824 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\ipmidrv.sys -- (IPMIDRV)
DRV:64bit: - [2006/11/02 11:09:58 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\wmiacpi.sys -- (WmiAcpi)
DRV:64bit: - [2006/11/02 11:00:15 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\amdk8.sys -- (AmdK8)
DRV:64bit: - [2006/11/02 11:00:15 | 000,043,008 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\processr.sys -- (Processor)
DRV:64bit: - [2006/11/02 10:43:25 | 000,086,528 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV:64bit: - [2006/09/18 23:30:18 | 000,047,104 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brserwdm.sys -- (BrSerWdm)
DRV:64bit: - [2006/09/18 23:30:18 | 000,014,976 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV:64bit: - [2005/09/23 23:18:34 | 000,261,120 | ---- | M] (Pinnacle Systems GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\DRIVERS\MarvinBus64.sys -- (MarvinBus)
DRV - [2009/12/02 13:20:58 | 000,017,800 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\eudskacs.sys -- (EUDSKACS)
DRV - [2009/12/02 13:20:56 | 000,030,600 | ---- | M] (CHENGDU YIWO Tech Development Co., Ltd) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\drivers\eubakup.sys -- (EUBAKUP)
DRV - [2009/09/25 16:45:12 | 000,015,584 | ---- | M] (ScriptLogic Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAtf.sys -- (DAtf)
DRV - [2009/09/25 16:45:00 | 000,016,096 | ---- | M] (ScriptLogic Corporation) [Kernel | Auto | Running] -- C:\Program Files (x86)\RemoteSupportManager\DAinfo.sys -- (DAInfo)
DRV - [2009/07/17 21:42:34 | 000,028,656 | ---- | M] (Systems Internals) [Kernel | On_Demand | Stopped] -- C:\SysinternalsSuite\PORTMSYS.SYS -- (PORTMON)
DRV - [2009/07/13 17:57:04 | 000,034,048 | ---- | M] (CACE Technologies) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\npf_devolo.sys -- (NPF_devolo) NetGroup Packet Filter Driver (devolo)
DRV - [2008/08/14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs)
DRV - [2008/03/17 01:00:00 | 000,021,120 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Lavalys\EVEREST Ultimate Edition\kerneld.amd64 -- (EverestDriver)
DRV - [2008/02/28 15:31:50 | 000,015,928 | ---- | M] (LogMeIn, Inc.) [Kernel | Auto | Running] -- C:\Program Files (x86)\LogMeIn\x64\rainfo.sys -- (LMIInfo)
DRV - [2006/11/02 00:50:52 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\WimFltr.sys -- (WimFltr)
DRV - [2004/06/22 16:44:50 | 000,005,632 | ---- | M] (EnTech Taiwan) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\Entech64.sys -- (ENTECH64)
DRV - [2002/03/19 10:29:16 | 000,014,165 | ---- | M] (Pinnacle Systems GmbH) [Kernel | System | Stopped] -- C:\Windows\SysWOW64\drivers\Pclepci.sys -- (PCLEPCI)
DRV - [1998/05/07 00:00:00 | 000,000,111 | ---- | M] () [Adapter | On_Demand | Unknown] -- C:\Windows\SysWow64\WINSOCK.SRG -- (Winsock)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes,DefaultScope = {17F7A6D4-0C47-49A0-BE35-7E66941BD4DB}
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{17F7A6D4-0C47-49A0-BE35-7E66941BD4DB}: "URL" = http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz=
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{31CF9EBE-5755-4a1d-AC25-2834D952D9B4}: "URL" = http://search.pdfcreator-toolbar.org/search?p=Q&ts=ne&w={searchTerms}&csrc=search-field
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB9}: "URL" = http://www.daemon-search.com/search?q={searchTerms}
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_235.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/wpi,version=1.4: C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll ()
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.3.46: C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.46: C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Sven Van den brande\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Sven Van den brande\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Sven Van den brande\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{000a9d1c-beef-4f90-9363-039d445309b8}: C:\Program Files (x86)\Google\Google Gears\Firefox\ [2010/04/16 19:55:06 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Fiddler2\FiddlerHook [2012/02/12 19:51:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/03/31 20:50:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 11.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 12.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.10\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.11\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.4\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.5\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.8\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.9\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 5.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 6.0.2\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2011/08/18 18:32:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 9.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2011/07/28 11:32:00 | 000,000,000 | ---D | M]
S

Svenvdb

Legacy Member
OTL Deel 3:

[2010/09/05 18:26:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions
[2010/09/05 18:26:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2008/06/16 20:30:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{6334D996-EA3E-4a0e-AA8D-15BA56B37241}
[2009/12/29 20:34:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{ea278cf8-93cd-484f-b951-57360482d33a}
[2008/10/21 20:15:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\[email protected]
[2012/04/22 21:39:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions
[2012/04/22 21:39:17 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012/04/22 21:39:21 | 000,000,000 | ---D | M] (IE Tab 2 (FF 3.6+)) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
[2010/04/28 07:07:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/06/19 23:44:07 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/10/12 22:36:29 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010/10/15 21:34:18 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011/10/18 19:40:07 | 000,000,000 | ---D | M] (Search Assistant) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{B3834E60-12A8-11E0-A289-939FDFD72085}
[2011/01/15 00:33:58 | 000,000,000 | ---D | M] (Web Developer) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
[2012/04/22 21:39:26 | 000,000,000 | ---D | M] (Page Speed) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2010/03/02 17:32:57 | 000,000,000 | ---D | M] (AFOM Addon) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\afom@idevfh
[2011/03/26 20:37:48 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/02/01 22:29:25 | 000,000,000 | ---D | M] (United States English Spellchecker) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2009/11/11 10:07:32 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/03/26 20:37:47 | 000,000,000 | ---D | M] ("easy Xdebug") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2009/03/13 20:30:13 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2012/03/31 20:50:22 | 000,000,000 | ---D | M] (Woordenboek Nederlands) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2010/09/02 23:14:33 | 000,000,000 | ---D | M] (VMware Remote Console Plug-in) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/03/28 13:46:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions
[2010/10/16 18:47:51 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010/10/15 21:34:18 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011/08/27 08:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\[email protected]
[2012/03/31 20:50:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/10/27 19:31:54 | 000,000,000 | ---D | M] (eID België) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/03/31 20:50:04 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/03/11 18:57:29 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/03/31 20:50:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/03/31 20:50:00 | 000,001,892 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bolcom-nl.xml
[2011/03/28 13:46:41 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml
[2012/03/31 20:50:00 | 000,004,558 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\marktplaats-nl.xml
[2012/03/31 20:50:00 | 000,001,049 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-nl.xml
[2010/12/11 14:42:51 | 000,001,106 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-nl.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = http://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t
CHR - default_search_provider: suggest_url = http://suggestqueries.google.com/complete/search?q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\plugins\npatgpc.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Panda ActiveScan 2.0 (Enabled) = C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: WPI Detector 1.4 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Sven Van den brande\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Firebug Lite for Google Chrome = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench\1.4.0.11967_0\
CHR - Extension: Google Zoeken = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Search Assistant = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfelndikbdcohbdimnhdhhokfljdidgn\1.5.0\
CHR - Extension: Gmail = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2011/11/08 00:48:02 | 000,000,842 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 192.168.1.101 hoofdpc
O1 - Hosts: 192.168.1.102 hoofdsven
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (CmjBrowserHelperObject Object) - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O3 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [USBestCR] C:\Program Files (x86)\Sitecom MD-020 SIM Editor\iconcs59995379.exe ()
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [WPCUMI] C:\Windows\SysNative\WpcUmi.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [beid] C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe (Belgian Government)
O4 - HKLM..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google)
O4 - HKLM..\Run: [LogitechCommunicationsManager] C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe ()
O4 - HKLM..\Run: [MMReminderService] C:\Program Files (x86)\Mindjet\MindManager 8\MmReminderService.exe (Mindjet)
O4 - HKLM..\Run: [NBAgent] C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [Pangolin] File not found
O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [tvncontrol] C:\Program Files (x86)\TightVNC\tvnserver.exe (GlavSoft LLC.)
O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" File not found
O4 - HKLM..\Run: [USBestCR] C:\Program Files (x86)\Sitecom MD-020 SIM Editor\iconcs59995379.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [ExtremeSync Background Scheduler] C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe (Super Flexible Software)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [LightShot] C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\LightShot.exe ()
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [WhatPulse] C:\Program Files (x86)\WhatPulse\WhatPulse.exe (WhatPulse.org)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Check for TWS Updates.lnk = C:\Jts\WiseUpdt.exe ()
O4 - Startup: C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9:64bit: - Extra Button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9:64bit: - Extra 'Tools' menuitem : Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra 'Tools' menuitem : &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: Send to Mindjet MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O9 - Extra Button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra 'Tools' menuitem : Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: alfa-zet.be ([mail] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: devexpress.com ([demos] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: fgov.be ([ccff02.minfin] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: google.com ([www] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: healthguard.be ([www] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: runaware.com ([www] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: vmware.com ([go] https in Local intranet)
O16:64bit: - DPF: {7340F0E4-AEDA-47C6-8971-9DB314030BD7} http://192.168.1.220/activex/decoder/h264_dec.cab (Reg Error: Key error.)
O16:64bit: - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://192.168.1.224/activex/AMC.cab (Reg Error: Key error.)
O16 - DPF: {00000130-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/ACELPACM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E6E22FB3-DC26-4E64-A849-F07E24DD9473}: NameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Sven Van den brande\Pictures\1595929.jpg
O24 - Desktop BackupWallPaper: C:\Users\Sven Van den brande\Pictures\1595929.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{34f74470-9f31-11dd-9896-001a4d57ffa4}\Shell\AutoRun\command - "" = I:\InstallTomTomHOME.exe
O33 - MountPoints2\{50bb62a7-9a7a-11dd-a65b-001a4d57ffa4}\Shell - "" = AutoRun
O33 - MountPoints2\{50bb62a7-9a7a-11dd-a65b-001a4d57ffa4}\Shell\AutoRun\command - "" = H:\setup.exe
O33 - MountPoints2\{7768b931-ab37-11de-a8de-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{7768b931-ab37-11de-a8de-005056c00008}\Shell\AutoRun\command - "" = G:\SETUP.EXE
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell - "" = AutoRun
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell\AutoRun\command - "" = F:\setup\rsrc\Autorun.exe
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell\dinstall\command - "" = F:\Directx\dxsetup.exe
O33 - MountPoints2\{94db5b30-a4b4-11df-afa5-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{94db5b30-a4b4-11df-afa5-005056c00008}\Shell\AutoRun\command - "" = F:\Welcome\Welcome.exe
O33 - MountPoints2\{bcb159f4-781f-11de-a886-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{bcb159f4-781f-11de-a886-005056c00008}\Shell\AutoRun\command - "" = G:\Imageviewer.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
S

Svenvdb

Legacy Member
OTL Deel 3:

[2010/09/05 18:26:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions
[2010/09/05 18:26:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2008/06/16 20:30:07 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{6334D996-EA3E-4a0e-AA8D-15BA56B37241}
[2009/12/29 20:34:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\{ea278cf8-93cd-484f-b951-57360482d33a}
[2008/10/21 20:15:56 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Extensions\[email protected]
[2012/04/22 21:39:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions
[2012/04/22 21:39:17 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2012/04/22 21:39:21 | 000,000,000 | ---D | M] (IE Tab 2 (FF 3.6+)) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
[2010/04/28 07:07:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011/06/19 23:44:07 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2011/10/12 22:36:29 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010/10/15 21:34:18 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011/10/18 19:40:07 | 000,000,000 | ---D | M] (Search Assistant) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{B3834E60-12A8-11E0-A289-939FDFD72085}
[2011/01/15 00:33:58 | 000,000,000 | ---D | M] (Web Developer) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}
[2012/04/22 21:39:26 | 000,000,000 | ---D | M] (Page Speed) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}
[2010/03/02 17:32:57 | 000,000,000 | ---D | M] (AFOM Addon) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\afom@idevfh
[2011/03/26 20:37:48 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/02/01 22:29:25 | 000,000,000 | ---D | M] (United States English Spellchecker) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2009/11/11 10:07:32 | 000,000,000 | ---D | M] (TVU Web Player) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/03/26 20:37:47 | 000,000,000 | ---D | M] ("easy Xdebug") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2009/03/13 20:30:13 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2012/03/31 20:50:22 | 000,000,000 | ---D | M] (Woordenboek Nederlands) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2010/09/02 23:14:33 | 000,000,000 | ---D | M] (VMware Remote Console Plug-in) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\9y3t5pv3.sven\extensions\[email protected]
[2011/03/28 13:46:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions
[2010/10/16 18:47:51 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010/10/15 21:34:18 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011/08/27 08:50:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sven Van den brande\AppData\Roaming\mozilla\Firefox\Profiles\fj1268om.default\extensions\[email protected]
[2012/03/31 20:50:22 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010/10/27 19:31:54 | 000,000,000 | ---D | M] (eID België) -- C:\Program Files (x86)\Mozilla Firefox\extensions\[email protected]
[2012/03/31 20:50:04 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/03/11 18:57:29 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2012/03/31 20:50:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/03/31 20:50:00 | 000,001,892 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bolcom-nl.xml
[2011/03/28 13:46:41 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml
[2012/03/31 20:50:00 | 000,004,558 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\marktplaats-nl.xml
[2012/03/31 20:50:00 | 000,001,049 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-nl.xml
[2010/12/11 14:42:51 | 000,001,106 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-nl.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = http://www.google.com/search?q={searchTerms}&ie=utf-8&oe=utf-8&aq=t
CHR - default_search_provider: suggest_url = http://suggestqueries.google.com/complete/search?q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\19.0.1084.52\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Browser\nppdf32.dll
CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll
CHR - plugin: Java Deployment Toolkit 6.0.310.5 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll
CHR - plugin: Windows Genuine Advantage (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npLegitCheckPlugin.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft Office 2003 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll
CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
CHR - plugin: ActiveTouch General Plugin Container (Enabled) = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\Application\plugins\npatgpc.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files (x86)\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Panda ActiveScan 2.0 (Enabled) = C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll
CHR - plugin: VLC Multimedia Plug-in (Enabled) = C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
CHR - plugin: WPI Detector 1.4 (Enabled) = C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll
CHR - plugin: Unity Player (Enabled) = C:\Users\Sven Van den brande\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: YouTube = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Firebug Lite for Google Chrome = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmagokdooijbeehmkpknfglimnifench\1.4.0.11967_0\
CHR - Extension: Google Zoeken = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Search Assistant = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfelndikbdcohbdimnhdhhokfljdidgn\1.5.0\
CHR - Extension: Gmail = C:\Users\Sven Van den brande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2011/11/08 00:48:02 | 000,000,842 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 192.168.1.101 hoofdpc
O1 - Hosts: 192.168.1.102 hoofdsven
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 localhost
O2:64bit: - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll (Google Inc.)
O2 - BHO: (ContributeBHO Class) - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (CmjBrowserHelperObject Object) - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O2 - BHO: (Google Gears Helper) - {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Contribute Toolbar) - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS4/contributeieplugin.dll ()
O3 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files (x86)\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [LogMeIn GUI] C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe (LogMeIn, Inc.)
O4:64bit: - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [USBestCR] C:\Program Files (x86)\Sitecom MD-020 SIM Editor\iconcs59995379.exe ()
O4:64bit: - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [WPCUMI] C:\Windows\SysNative\WpcUmi.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe_ID0ENQBO] C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4Tray.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AdobeCS4ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [beid] C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe (Belgian Government)
O4 - HKLM..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google)
O4 - HKLM..\Run: [LogitechCommunicationsManager] C:\Program Files (x86)\Common Files\LogiShrd\LComMgr\Communications_Helper.exe ()
O4 - HKLM..\Run: [LogitechQuickCamRibbon] C:\Program Files (x86)\Logitech\QuickCam\Quickcam.exe ()
O4 - HKLM..\Run: [MMReminderService] C:\Program Files (x86)\Mindjet\MindManager 8\MmReminderService.exe (Mindjet)
O4 - HKLM..\Run: [NBAgent] C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe (Nero AG)
O4 - HKLM..\Run: [Pangolin] File not found
O4 - HKLM..\Run: [PlusService] C:\Program Files (x86)\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKLM..\Run: [tvncontrol] C:\Program Files (x86)\TightVNC\tvnserver.exe (GlavSoft LLC.)
O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" File not found
O4 - HKLM..\Run: [USBestCR] C:\Program Files (x86)\Sitecom MD-020 SIM Editor\iconcs59995379.exe ()
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\SysWow64\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [ExtremeSync Background Scheduler] C:\Program Files (x86)\SuperFlexible\ExtremeSyncService.exe (Super Flexible Software)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [LightShot] C:\Users\Sven Van den brande\AppData\Local\Skillbrains\lightshot\LightShot.exe ()
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [WhatPulse] C:\Program Files (x86)\WhatPulse\WhatPulse.exe (WhatPulse.org)
O4 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe File not found
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\SysWow64\cmd.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Check for TWS Updates.lnk = C:\Jts\WiseUpdt.exe ()
O4 - Startup: C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Sven Van den brande\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O8:64bit: - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Append to Existing PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9:64bit: - Extra Button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9:64bit: - Extra 'Tools' menuitem : Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra 'Tools' menuitem : &Instellingen voor Gears - {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - C:\Program Files (x86)\Google\Google Gears\Internet Explorer\0.5.36.0\gears.dll (Google Inc.)
O9 - Extra Button: Send to Mindjet MindManager - {2F72393D-2472-4F82-B600-ED77F354B7FF} - C:\Program Files (x86)\Mindjet\MindManager 8\Mm8InternetExplorer.dll (Mindjet)
O9 - Extra Button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O9 - Extra 'Tools' menuitem : Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - C:\Program Files (x86)\Fiddler2\Fiddler.exe (Eric Lawrence)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000007 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000008 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000019 - C:\Windows\SysNative\wpclsp.dll (Microsoft Corporation)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000020 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000021 - CC:\Program Files (x86)\VMware\VMware Workstation\x64\vsocklib.dll File not found
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: alfa-zet.be ([mail] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: devexpress.com ([demos] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: fgov.be ([ccff02.minfin] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: google.com ([www] https in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: healthguard.be ([www] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: runaware.com ([www] http in Vertrouwde websites)
O15 - HKU\S-1-5-21-3944816848-1952994017-3261843906-1000\..Trusted Domains: vmware.com ([go] https in Local intranet)
O16:64bit: - DPF: {7340F0E4-AEDA-47C6-8971-9DB314030BD7} http://192.168.1.220/activex/decoder/h264_dec.cab (Reg Error: Key error.)
O16:64bit: - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} http://192.168.1.224/activex/AMC.cab (Reg Error: Key error.)
O16 - DPF: {00000130-9980-0010-8000-00AA00389B71} http://codecs.microsoft.com/codecs/i386/ACELPACM.CAB (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E6E22FB3-DC26-4E64-A849-F07E24DD9473}: NameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\0x00000001 - No CLSID value found
O18:64bit: - Protocol\Handler\msdaipp\oledb - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\ms-itss - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\mso-offdap11 - No CLSID value found
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O22:64bit: - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\SysNative\DreamScene.dll (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Sven Van den brande\Pictures\1595929.jpg
O24 - Desktop BackupWallPaper: C:\Users\Sven Van den brande\Pictures\1595929.jpg
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{34f74470-9f31-11dd-9896-001a4d57ffa4}\Shell\AutoRun\command - "" = I:\InstallTomTomHOME.exe
O33 - MountPoints2\{50bb62a7-9a7a-11dd-a65b-001a4d57ffa4}\Shell - "" = AutoRun
O33 - MountPoints2\{50bb62a7-9a7a-11dd-a65b-001a4d57ffa4}\Shell\AutoRun\command - "" = H:\setup.exe
O33 - MountPoints2\{7768b931-ab37-11de-a8de-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{7768b931-ab37-11de-a8de-005056c00008}\Shell\AutoRun\command - "" = G:\SETUP.EXE
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell - "" = AutoRun
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell\AutoRun\command - "" = F:\setup\rsrc\Autorun.exe
O33 - MountPoints2\{86cb132e-d8b2-11dc-9fe8-001a4d57ffa4}\Shell\dinstall\command - "" = F:\Directx\dxsetup.exe
O33 - MountPoints2\{94db5b30-a4b4-11df-afa5-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{94db5b30-a4b4-11df-afa5-005056c00008}\Shell\AutoRun\command - "" = F:\Welcome\Welcome.exe
O33 - MountPoints2\{bcb159f4-781f-11de-a886-005056c00008}\Shell - "" = AutoRun
O33 - MountPoints2\{bcb159f4-781f-11de-a886-005056c00008}\Shell\AutoRun\command - "" = G:\Imageviewer.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
S

Svenvdb

Legacy Member
OTL Deel 4:



========== Files/Folders - Created Within 30 Days ==========

[2012/06/03 23:22:38 | 000,000,000 | ---D | C] -- C:\Users\Sven Van den brande\AppData\Roaming\MvvmLight
[2012/06/03 23:22:38 | 000,000,000 | ---D | C] -- C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MvvmLight
[2012/06/03 23:22:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Laurent Bugnion (GalaSoft)
[2012/06/03 23:01:44 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Users\Sven Van den brande\Desktop\OTL.com
[2012/06/03 10:43:11 | 000,000,000 | ---D | C] -- C:\Users\Sven Van den brande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis
[2012/05/05 23:13:34 | 000,000,000 | ---D | C] -- C:\Users\Sven Van den brande\Documents\LINQPad Queries
[2012/05/05 23:12:35 | 000,000,000 | ---D | C] -- C:\LINQPad4
[2011/12/02 20:58:58 | 000,110,080 | ---- | C] (Infragistics, Inc.) -- C:\Users\Sven Van den brande\AppData\Local\sslcra32.exe
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Sven Van den brande\AppData\Local\*.tmp files -> C:\Users\Sven Van den brande\AppData\Local\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/06/03 23:20:37 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/06/03 23:14:01 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\update-sys.job
[2012/06/03 23:11:47 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3944816848-1952994017-3261843906-1000UA.job
[2012/06/03 23:01:42 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Users\Sven Van den brande\Desktop\OTL.com
[2012/06/03 22:52:43 | 002,414,515 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\GalaSoft.MvvmLight.V4beta1.4.0.2.19.msi
[2012/06/03 22:45:26 | 000,003,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/06/03 22:45:26 | 000,003,776 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/06/03 22:40:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/06/03 19:39:00 | 000,000,416 | ---- | M] () -- C:\Windows\tasks\update-S-1-5-21-3944816848-1952994017-3261843906-1000.job
[2012/06/03 14:27:27 | 000,211,968 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/06/03 12:14:00 | 000,000,982 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2012/06/03 08:11:01 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3944816848-1952994017-3261843906-1000Core.job
[2012/06/03 03:19:27 | 000,001,054 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/06/02 18:48:15 | 000,418,248 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012/06/02 18:48:14 | 000,418,248 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012/06/02 18:48:06 | 000,002,359 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UltraMon.lnk
[2012/06/02 18:45:01 | 000,065,536 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl
[2012/06/02 18:44:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/06/02 07:15:00 | 000,001,050 | ---- | M] () -- C:\Windows\tasks\Paragon Archive name arc_130112203127975.job
[2012/06/01 19:20:00 | 000,000,498 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2012/05/28 13:44:20 | 003,329,528 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/05/28 13:00:02 | 002,476,440 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/05/28 13:00:02 | 001,022,960 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2012/05/28 13:00:02 | 000,922,468 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/05/28 13:00:02 | 000,266,578 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2012/05/28 13:00:02 | 000,228,656 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/05/24 06:12:17 | 000,002,149 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\Google Chrome.lnk
[2012/05/24 06:12:17 | 000,002,111 | ---- | M] () -- C:\Users\Sven Van den brande\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2012/05/20 23:11:52 | 000,000,043 | ---- | M] () -- C:\Windows\hpfccopy.INI
[2012/05/17 19:39:40 | 000,001,735 | ---- | M] () -- C:\Users\Sven Van den brande\AppData\Local\UserProducts.xml
[2012/05/14 23:20:34 | 000,002,157 | ---- | M] () -- C:\Users\Public\Desktop\Trader Workstation 4.0.LNK
[2012/05/13 22:56:05 | 008,228,003 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\VDB_Before_DataAccess_Layer_2.zip
[2012/05/13 22:43:35 | 007,554,414 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\Programming.Entity.Framework.DbContext.pdf
[2012/05/11 11:17:47 | 489,444,800 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012/05/09 22:26:47 | 006,798,953 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\VDB_Before_IRepository_Insert.rar
[2012/05/05 23:13:16 | 000,000,586 | ---- | M] () -- C:\Users\Sven Van den brande\Desktop\LINQPad.lnk
[4 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Sven Van den brande\AppData\Local\*.tmp files -> C:\Users\Sven Van den brande\AppData\Local\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/06/03 22:52:52 | 002,414,515 | ---- | C] () -- C:\Users\Sven Van den brande\Desktop\GalaSoft.MvvmLight.V4beta1.4.0.2.19.msi
[2012/05/13 22:55:28 | 008,228,003 | ---- | C] () -- C:\Users\Sven Van den brande\Desktop\VDB_Before_DataAccess_Layer_2.zip
[2012/05/13 22:42:59 | 007,554,414 | ---- | C] () -- C:\Users\Sven Van den brande\Desktop\Programming.Entity.Framework.DbContext.pdf
[2012/05/11 11:17:47 | 489,444,800 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012/05/09 22:26:20 | 006,798,953 | ---- | C] () -- C:\Users\Sven Van den brande\Desktop\VDB_Before_IRepository_Insert.rar
[2012/05/05 23:13:16 | 000,000,586 | ---- | C] () -- C:\Users\Sven Van den brande\Desktop\LINQPad.lnk
[2012/04/29 13:22:09 | 000,001,657 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Roaming\SvcTraceViewer.exe.settings
[2012/04/25 21:53:10 | 000,000,754 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\recently-used.xbel
[2012/02/19 22:46:04 | 000,000,034 | ---- | C] () -- C:\Windows\cdplayer.ini
[2012/02/07 23:24:47 | 000,000,043 | ---- | C] () -- C:\Windows\ib.ini
[2012/02/03 22:01:17 | 000,026,624 | ---- | C] () -- C:\Windows\GetIe.dll
[2011/12/18 14:32:32 | 000,000,000 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\debuggee.mdmp
[2011/11/11 23:16:18 | 000,024,576 | ---- | C] () -- C:\Windows\UniFISH.exe
[2011/09/11 22:51:15 | 000,007,168 | ---- | C] () -- C:\Windows\SysWow64\Dtctrace.dll
[2011/08/31 21:40:54 | 000,180,936 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat
[2011/08/27 02:43:55 | 000,928,362 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\census.cache
[2011/08/27 02:29:27 | 000,282,593 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\ars.cache
[2011/06/05 18:03:10 | 000,000,000 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Roaming\bibstats
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/03/27 11:37:01 | 000,001,735 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\UserProducts.xml
[2011/02/05 01:10:49 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\VistaInfo32.dll
[2011/02/04 00:29:00 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\afasrv64.exe
[2011/01/25 21:30:27 | 000,000,259 | ---- | C] () -- C:\Windows\Tool.ini
[2010/12/12 09:55:18 | 000,000,000 | ---- | C] () -- C:\Windows\BRCALIB.INI
[2010/10/25 19:50:11 | 000,153,088 | ---- | C] () -- C:\Program Files (x86)\UNWISE.EXE
[2010/08/26 12:58:32 | 000,000,036 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Local\housecall.guid.cache
[2010/08/12 20:46:25 | 000,000,000 | ---- | C] () -- C:\Users\Sven Van den brande\AppData\Roaming\.NANotifyHere
[2010/07/15 10:08:04 | 000,118,272 | ---- | C] () -- C:\Windows\SysWow64\beidmdrv.dll
[2010/07/13 22:36:01 | 000,000,000 | ---- | C] () -- C:\Windows\MSYS.INI

========== LOP Check ==========

[2012/03/18 23:10:19 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\2BrightSparks
[2008/07/23 21:21:57 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Ableton
[2009/05/28 20:38:58 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Acronis
[2010/02/01 22:38:11 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\AnvSoft
[2011/01/04 21:49:39 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Ariane Software
[2010/11/03 21:35:26 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Audacity
[2011/03/22 21:45:44 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Autodesk
[2010/10/25 23:37:33 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\AVICFeeds
[2012/03/05 19:48:23 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Axis Communications
[2009/01/07 00:34:24 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\bazaar
[2008/08/29 11:59:37 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\beid-cache
[2011/06/18 20:43:40 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Bitcoin
[2008/03/16 10:50:11 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\BSplayer PRO
[2012/01/10 00:29:47 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\CrashPlan
[2008/12/11 08:46:12 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DAEMON Tools
[2012/04/23 20:46:40 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DAEMON Tools Lite
[2008/12/11 08:46:11 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DAEMON Tools Pro
[2010/05/30 11:52:39 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Der Planer 4
[2011/02/24 23:07:05 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DevDammann
[2009/08/04 21:15:47 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DoBs
[2008/04/05 15:04:40 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DommelMeter
[2012/06/03 23:13:15 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Dropbox
[2012/01/04 23:57:49 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoft
[2011/12/04 09:49:48 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\DVDVideoSoftIEHelpers
[2010/12/06 23:17:15 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\expressor
[2012/04/23 20:45:10 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\FileZilla
[2010/05/17 15:56:55 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\GeekAngels.F7F00E8DEE988B8CBBC923C1011FCFC2ECEA34C6.1
[2009/06/06 22:46:57 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Genie-Soft
[2010/07/26 16:44:36 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Got Game Entertainment
[2010/05/29 21:15:19 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\GrabIt
[2010/12/11 00:22:16 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\gtk-2.0
[2012/04/15 19:37:31 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\HTC
[2011/05/18 23:21:44 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2010/06/30 18:24:02 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\ICAClient
[2011/06/21 22:43:28 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\ICSharpCode
[2012/05/31 17:21:45 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Image Zone Express
[2010/08/12 18:58:40 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\ImgBurn
[2008/06/08 20:50:55 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\IsolatedStorage
[2009/06/19 08:15:46 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\ISP Monitor
[2012/01/31 23:47:59 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\JAM Software
[2011/08/29 10:32:06 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\JetBrains
[2010/04/05 14:41:34 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\K-Batch
[2009/06/06 23:21:57 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\LaCie
[2010/09/11 20:20:55 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\LINQPad
[2011/11/07 20:11:24 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Lite
[2008/03/05 19:57:49 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\MicroSE
[2011/06/04 14:58:03 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Milestone
[2011/09/06 21:40:19 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\MishraReader
[2012/06/03 23:22:38 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\MvvmLight
[2011/11/29 22:59:26 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\NetDrive
[2012/04/25 21:53:24 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Notepad++
[2011/02/05 01:10:57 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\NotMyIp
[2011/12/10 23:40:12 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\NuGet
[2009/12/02 23:53:00 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\OpenOffice.org
[2008/03/13 10:45:56 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Opera
[2008/06/16 20:30:02 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Participatory Culture Foundation
[2008/08/17 16:08:51 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\PCF-VLC
[2011/06/12 20:36:16 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\poclbm
[2008/08/17 22:18:15 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\postgresql
[2011/08/27 10:30:42 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Printer Info Cache
[2009/04/29 21:13:59 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Pro Cycling Manager 2008
[2011/01/26 00:51:47 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\RIFT
[2010/11/07 10:50:07 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\rsync.net Backup Client
[2010/06/23 19:37:57 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Similarity
[2010/07/27 19:50:27 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\SmartDraw
[2010/03/25 00:12:41 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Softland
[2011/05/29 12:19:03 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Sports Interactive
[2012/05/06 17:00:17 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Spotify
[2010/09/26 11:11:24 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\SQL Developer
[2009/03/12 21:21:31 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Subversion
[2011/02/05 00:36:09 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TasksScheduler
[2011/06/25 21:27:16 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TeamViewer
[2010/09/26 17:37:59 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Telerik
[2009/10/18 11:36:28 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\temp
[2010/09/05 18:26:39 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Thunderbird
[2011/11/27 10:31:27 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TightVNC
[2008/10/21 20:15:55 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TomTom
[2010/05/24 22:33:01 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Tropico 3
[2009/12/27 17:33:00 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TS3Client
[2011/08/31 21:35:22 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1
[2009/10/22 20:00:44 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Ubisoft
[2011/03/27 20:26:35 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Unity
[2012/04/23 20:45:11 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\uTorrent
[2009/10/22 19:12:59 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\VanDale
[2012/05/17 16:36:37 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\VdbProjects
[2012/04/23 20:46:21 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Vso
[2012/04/18 23:02:33 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\webex
[2012/03/01 19:48:45 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\Werkmanager
[2009/04/19 20:21:00 | 000,000,000 | ---D | M] -- C:\Users\Sven Van den brande\AppData\Roaming\WhatPulse
[2010/12/13 00:46:31 | 000,000,000 | -HSD | M] -- C:\Users\Sven Van den brande\AppData\Roaming\wyUpdate AU
[2012/06/01 19:20:00 | 000,000,498 | ---- | M] () -- C:\Windows\Tasks\Ad-Aware Update (Weekly).job
[2010/03/25 00:14:52 | 000,000,544 | ---- | M] () -- C:\Windows\Tasks\fba_PC Sven C Schijf.job
[2012/06/02 07:15:00 | 000,001,050 | ---- | M] () -- C:\Windows\Tasks\Paragon Archive name arc_130112203127975.job
[2012/06/02 09:11:16 | 000,032,558 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012/06/03 19:39:00 | 000,000,416 | ---- | M] () -- C:\Windows\Tasks\update-S-1-5-21-3944816848-1952994017-3261843906-1000.job
[2012/06/03 23:14:01 | 000,000,416 | ---- | M] () -- C:\Windows\Tasks\update-sys.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 192 bytes -> C:\ProgramData\TEMP:8927A071

< End of report >
J

Juisterr

Legacy Member
Flinke uitslag, sommige meerdere keren geplaatst.

Start OTL
  • Plak het volgende onder Custom Scans/Fixes

    :OTL

    :Services

    :Reg

    :Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [emptyflash]
    [createrestorepoint]
    [reboot]
    Klik om te vergroten...
  • Klik daarna bovenaan op de knop Run Fix
  • Laat het programma ongestoord zijn werk doen. De pc zal na afloop opnieuw opgestart worden.
S

Svenvdb

Legacy Member
All processes killed
========== OTL ==========
========== SERVICES/DRIVERS ==========
========== REGISTRY ==========
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP-configuratie
De DNS-omzettingscache is leeggemaakt.
C:\Users\Sven Van den brande\Desktop\cmd.bat deleted successfully.
C:\Users\Sven Van den brande\Desktop\cmd.txt deleted successfully.
========== COMMANDS ==========
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: AppData

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 57257 bytes
->Flash cache emptied: 56507 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: nspadm
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 647052 bytes
->FireFox cache emptied: 3276039 bytes
->Flash cache emptied: 84 bytes

User: postgres
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 57257 bytes

User: Public

User: Sven Van den brande
->Temp folder emptied: 176738816 bytes
->Temporary Internet Files folder emptied: 230152956 bytes
->Java cache emptied: 107051794 bytes
->FireFox cache emptied: 228640000 bytes
->Google Chrome cache emptied: 98831803 bytes
->Opera cache emptied: 3944028 bytes
->Flash cache emptied: 1967672 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 200704 bytes
%systemroot%\System32 .tmp files removed: 3229920 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 67765422 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 14217729 bytes
RecycleBin emptied: 51016437 bytes

Total Files Cleaned = 942,00 mb


[EMPTYFLASH]

User: All Users

User: AppData

User: Default
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: nspadm
->Flash cache emptied: 0 bytes

User: postgres

User: Public

User: Sven Van den brande
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb

Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.48.0 log created on 06102012_093846

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
C:\Users\Sven Van den brande\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
Het archief is een bevroren moment uit een vorige versie van dit forum, met andere regels en andere bazen. Deze posts weerspiegelen op geen enkele manier onze huidige ideeën, waarden of wereldbeelden en zijn op sommige plaatsen gecensureerd wegens ontoelaatbaar. Veel zijn in een andere tijdsgeest gemaakt, al dan niet ironisch - zoals in het ironische subforum Off-Topic - en zouden op dit moment niet meer gepost (mogen) worden. Toch bieden we dit archief nog graag aan als informatiedatabank en naslagwerk. Lees er hier meer over of start een gesprek met anderen.
Terug
Bovenaan