Four instances of Pup.Optional.Conduit.A after running full scan

tillerr · January 12, 2014

Here is the OTL.txt (too big for one post so it is split between two posts.

OTL logfile created on: 1/12/2014 3:19:40 PM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Roger\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.97 Gb Total Physical Memory | 1.42 Gb Available Physical Memory | 47.94% Memory free

6.13 Gb Paging File | 4.24 Gb Available in Paging File | 69.13% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 286.86 Gb Total Space | 76.30 Gb Free Space | 26.60% Space Free | Partition Type: NTFS

Drive F: | 931.51 Gb Total Space | 239.06 Gb Free Space | 25.66% Space Free | Partition Type: NTFS

Drive I: | 8.589935E9 Gb Total Space | 8.589935E9 Gb Free Space | 100.00% Space Free | Partition Type: Bitcasa

Drive Q: | 9.77 Gb Total Space | 2.50 Gb Free Space | 25.65% Space Free | Partition Type: NTFS

Drive S: | 1.46 Gb Total Space | 0.69 Gb Free Space | 46.96% Space Free | Partition Type: NTFS

Computer Name: TILLER | User Name: Roger | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2014/01/12 15:17:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Roger\Desktop\OTL.com

PRC - [2014/01/01 15:10:49 | 003,764,024 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe

PRC - [2014/01/01 15:10:48 | 000,050,344 | ---- | M] (AVAST Software) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe

PRC - [2013/12/06 15:47:44 | 020,203,904 | ---- | M] (Google) -- C:\Program Files\Google\Drive\googledrivesync.exe

PRC - [2013/11/19 00:43:48 | 003,535,360 | ---- | M] () -- C:\Program Files\Bitcasa\Bitcasa.exe

PRC - [2013/11/11 20:17:02 | 007,380,992 | ---- | M] (Google Inc.) -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\MusicManager.exe

PRC - [2013/10/31 09:39:24 | 000,277,200 | ---- | M] (Unified Intents AB) -- C:\Program Files\Unified Remote\RemoteServer.exe

PRC - [2013/09/23 02:21:16 | 000,050,128 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Chrome Remote Desktop\30.0.1599.56\remoting_host.exe

PRC - [2013/06/05 00:01:52 | 004,489,472 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\Roger\AppData\Local\Akamai\netsession_win.exe

PRC - [2013/05/24 19:47:30 | 027,776,968 | ---- | M] (Dropbox, Inc.) -- C:\Users\Roger\AppData\Roaming\Dropbox\bin\Dropbox.exe

PRC - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012/09/24 06:36:00 | 001,666,112 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe

PRC - [2012/09/24 06:36:00 | 001,665,088 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe

PRC - [2012/09/24 06:36:00 | 000,476,224 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkPad\Utilities\PWMUIAux.EXE

PRC - [2012/09/24 06:36:00 | 000,128,576 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\ThinkPad\Utilities\SCHTASK.EXE

PRC - [2012/05/30 16:59:44 | 000,367,712 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe

PRC - [2012/05/30 16:59:38 | 000,195,680 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe

PRC - [2012/05/30 16:59:34 | 000,433,248 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe

PRC - [2012/05/30 16:59:32 | 000,273,504 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

PRC - [2012/05/30 16:59:30 | 000,134,240 | ---- | M] (Lenovo) -- C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

PRC - [2011/12/21 22:11:26 | 003,961,464 | ---- | M] (Eye-Fi, Inc.) -- C:\Program Files\Eye-Fi\Helper\EyeFiHelper.exe

PRC - [2011/11/04 14:37:16 | 000,330,304 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe

PRC - [2011/10/20 09:58:46 | 000,101,440 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe

PRC - [2011/08/04 08:57:18 | 000,056,376 | ---- | M] (Fisher-Price) -- C:\Program Files\Fisher-Price\iXL\iXL.Middleware.exe

PRC - [2011/07/25 22:14:00 | 000,028,672 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\System Update\SUService.exe

PRC - [2011/07/12 17:03:34 | 000,064,960 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe

PRC - [2011/07/12 15:54:02 | 000,127,336 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe

PRC - [2011/07/12 15:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe

PRC - [2011/04/07 15:41:32 | 000,138,680 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\ZOOM\TpScrex.exe

PRC - [2011/03/16 12:25:58 | 015,502,336 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe

PRC - [2010/12/17 17:12:56 | 000,332,288 | ---- | M] () -- C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

PRC - [2010/12/14 09:49:23 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe

PRC - [2010/04/22 23:16:46 | 000,128,296 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

PRC - [2010/03/26 03:08:00 | 000,062,312 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe

PRC - [2009/05/27 21:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files\Lenovo\Message Center Plus\MCPLaunch.exe

PRC - [2009/04/11 01:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe

PRC - [2009/03/04 20:54:34 | 000,750,904 | ---- | M] (Lenovo Group Limited) -- c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe

PRC - [2009/01/26 14:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe

PRC - [2008/06/08 13:00:00 | 000,165,208 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE

PRC - [2008/06/08 13:00:00 | 000,124,248 | ---- | M] (Lenovo Group Limited) -- C:\Program Files\Lenovo\LenovoCare\LPMLCHK.EXE

PRC - [2008/06/06 16:26:38 | 000,520,192 | ---- | M] () -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe

PRC - [2008/04/15 22:38:24 | 000,315,392 | R--- | M] (Lenovo) -- C:\Program Files\Lenovo\ATK Hotkey\LFKA.exe

PRC - [2008/04/07 21:58:20 | 000,166,376 | ---- | M] (Digital Delivery Networks, Inc.) -- C:\Program Files\DDNI\DIBS\DDNIService.exe

PRC - [2008/03/19 23:46:46 | 000,077,824 | R--- | M] (ATK0101) -- C:\Program Files\Lenovo\ATK Hotkey\LControl.exe

PRC - [2008/03/19 23:46:44 | 000,208,896 | R--- | M] () -- C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe

PRC - [2008/01/20 21:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Windows Defender\MSASCui.exe

PRC - [2008/01/11 19:50:16 | 000,030,312 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe

PRC - [2007/10/30 13:35:20 | 000,094,208 | R--- | M] () -- C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe

PRC - [2007/10/02 23:53:00 | 000,094,208 | R--- | M] () -- C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe

PRC - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe

PRC - [2007/02/07 23:06:10 | 000,049,152 | ---- | M] (UltiDev LLC) -- C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe

PRC - [2007/01/04 21:48:52 | 000,112,152 | R--- | M] (InterVideo) -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe

========== Modules (No Company Name) ==========

MOD - [2014/01/12 11:41:43 | 000,026,624 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_multiprocessing.pyd

MOD - [2014/01/12 11:41:42 | 000,805,888 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._gdi_.pyd

MOD - [2014/01/12 11:41:41 | 001,153,024 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_ssl.pyd

MOD - [2014/01/12 11:41:41 | 000,110,080 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\pywintypes27.dll

MOD - [2014/01/12 11:41:40 | 000,711,680 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_hashlib.pyd

MOD - [2014/01/12 11:41:37 | 000,811,008 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._windows_.pyd

MOD - [2014/01/12 11:41:36 | 000,070,656 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._html2.pyd

MOD - [2014/01/12 11:41:36 | 000,024,064 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32pipe.pyd

MOD - [2014/01/12 11:41:35 | 001,062,400 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._controls_.pyd

MOD - [2014/01/12 11:41:35 | 000,087,040 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_ctypes.pyd

MOD - [2014/01/12 11:41:35 | 000,038,912 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32inet.pyd

MOD - [2014/01/12 11:41:35 | 000,035,840 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32process.pyd

MOD - [2014/01/12 11:41:35 | 000,025,600 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32pdh.pyd

MOD - [2014/01/12 11:41:33 | 000,686,080 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\unicodedata.pyd

MOD - [2014/01/12 11:41:33 | 000,127,488 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\pyexpat.pyd

MOD - [2014/01/12 11:41:33 | 000,018,432 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32event.pyd

MOD - [2014/01/12 11:41:33 | 000,010,240 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\select.pyd

MOD - [2014/01/12 11:41:31 | 000,521,680 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\windows._lib_cacheinvalidation.pyd

MOD - [2014/01/12 11:41:31 | 000,119,808 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32file.pyd

MOD - [2014/01/12 11:41:31 | 000,108,544 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32security.pyd

MOD - [2014/01/12 11:41:31 | 000,017,408 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32profile.pyd

MOD - [2014/01/12 11:41:30 | 000,128,512 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_elementtree.pyd

MOD - [2014/01/12 11:41:30 | 000,098,816 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32api.pyd

MOD - [2014/01/12 11:41:30 | 000,044,032 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\_socket.pyd

MOD - [2014/01/12 11:41:29 | 000,557,056 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\pysqlite2._sqlite.pyd

MOD - [2014/01/12 11:41:29 | 000,320,512 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32com.shell.shell.pyd

MOD - [2014/01/12 11:41:27 | 001,175,040 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._core_.pyd

MOD - [2014/01/12 11:41:27 | 000,364,544 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\pythoncom27.dll

MOD - [2014/01/12 11:41:27 | 000,022,528 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32ts.pyd

MOD - [2014/01/12 11:41:26 | 000,735,232 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._misc_.pyd

MOD - [2014/01/12 11:41:25 | 000,011,264 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\win32crypt.pyd

MOD - [2014/01/12 11:41:24 | 000,122,368 | ---- | M] () -- C:\Users\Roger\AppData\Local\Temp\_MEI59202\wx._wizard.pyd

MOD - [2013/12/14 14:19:14 | 019,336,120 | ---- | M] () -- C:\Program Files\Alwil Software\Avast5\libcef.dll

MOD - [2013/11/19 00:43:48 | 003,535,360 | ---- | M] () -- C:\Program Files\Bitcasa\Bitcasa.exe

MOD - [2013/11/19 00:38:58 | 000,253,440 | ---- | M] () -- C:\Program Files\Bitcasa\ExplorerMenu.dll

MOD - [2013/11/19 00:38:36 | 001,905,664 | ---- | M] () -- C:\Program Files\Bitcasa\bitcasaui.dll

MOD - [2013/11/11 20:05:06 | 000,344,064 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll

MOD - [2013/11/11 20:04:48 | 000,231,936 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll

MOD - [2013/11/11 20:03:34 | 000,253,440 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\libid3tag.dll

MOD - [2013/11/11 20:03:08 | 000,117,248 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\libaacdec.dll

MOD - [2013/10/12 02:37:34 | 000,978,944 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\f453ecc6bb7fc8d52d61247676944623\System.Configuration.ni.dll

MOD - [2013/10/12 02:30:59 | 012,434,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\73d9bc894522543b561a0342dac87c06\System.Windows.Forms.ni.dll

MOD - [2013/10/12 02:30:30 | 014,329,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\f228cc72a6647716127cd44ca416e6dc\PresentationFramework.ni.dll

MOD - [2013/10/12 02:30:03 | 012,218,880 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\b2482534bee5c520cdfe9c8f7df6a92f\PresentationCore.ni.dll

MOD - [2013/10/12 02:29:28 | 003,325,440 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\c16ade1485996fa4981edc7df436a15b\WindowsBase.ni.dll

MOD - [2013/10/10 22:08:55 | 018,109,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\60608b811724b2711cb96817043c4dd8\System.ServiceModel.ni.dll

MOD - [2013/10/10 22:06:21 | 002,659,328 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\10519c5a16fab95707f40b55941647b5\System.Runtime.Serialization.ni.dll

MOD - [2013/10/10 21:53:15 | 013,199,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\e40d894a772b2cff5ffd5a84ef20d2d4\System.Windows.Forms.ni.dll

MOD - [2013/10/10 21:53:03 | 001,014,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\71d887ce964fb69b7f03c4fe7a3f28ff\System.Configuration.ni.dll

MOD - [2013/10/10 21:52:58 | 006,817,280 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\de9e77138e17f0188104c9ec32d375da\System.Data.ni.dll

MOD - [2013/10/10 21:52:50 | 007,070,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\dac1208781fdd0b960afc12efff42944\System.Core.ni.dll

MOD - [2013/08/14 16:02:51 | 000,158,720 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PWMUIAux\0ff20148e013fca5ae273f80b209e0f7\PWMUIAux.ni.exe

MOD - [2013/08/14 15:56:28 | 005,462,016 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09f5b3f7a363b742a73937e818595597\System.Xml.ni.dll

MOD - [2013/08/14 15:55:27 | 001,593,344 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\c0df7e124d8d5e2821fd7d3921d404f7\System.Drawing.ni.dll

MOD - [2013/08/14 15:50:32 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\d7153acb7b6ccb5a6a886d6f0ab732b1\System.ni.dll

MOD - [2013/08/14 09:31:43 | 001,667,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\3a3fc0216674bdea0be809b305517c98\System.Drawing.ni.dll

MOD - [2013/08/14 09:31:34 | 005,628,928 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\884bcbd22130ebeb1211bc7bcc3910c9\System.Xml.ni.dll

MOD - [2013/08/14 09:31:21 | 009,099,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\de853615c8224ba5d9aa9b76276c6d98\System.ni.dll

MOD - [2013/07/11 03:15:43 | 000,970,240 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PWMUICtl\2151bc7aa6bb46896e02f46ad586d823\PWMUICtl.ni.dll

MOD - [2013/07/11 03:04:43 | 000,539,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\67cba943200e614ee0ae28270600892e\PresentationFramework.Luna.ni.dll

MOD - [2013/07/11 03:04:35 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\af7b745f6a06b800c73f1556553fe331\PresentationFramework.Aero.ni.dll

MOD - [2013/07/11 03:01:57 | 011,497,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\6a938df70a8b7996a3890b4f34c83906\mscorlib.ni.dll

MOD - [2013/07/11 02:26:56 | 014,416,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\cf58670896c5313b9b52f026f4455a5d\mscorlib.ni.dll

MOD - [2013/03/13 15:48:52 | 024,978,944 | ---- | M] () -- C:\Users\Roger\AppData\Roaming\Dropbox\bin\libcef.dll

MOD - [2013/02/27 14:33:20 | 000,026,624 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\imageformats\qgif4.dll

MOD - [2013/02/27 14:33:06 | 010,683,392 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\QtWebKit4.dll

MOD - [2013/02/27 14:33:02 | 001,681,408 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\QtNetwork4.dll

MOD - [2013/02/27 14:32:58 | 007,741,952 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\QtGui4.dll

MOD - [2013/02/27 14:32:56 | 002,248,192 | ---- | M] () -- C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\QtCore4.dll

MOD - [2012/11/13 18:32:50 | 003,558,400 | ---- | M] () -- C:\Users\Roger\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll

MOD - [2012/09/24 06:36:00 | 000,103,424 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\US\PWMROV.DLL

MOD - [2012/09/24 06:36:00 | 000,084,480 | ---- | M] () -- C:\Program Files\ThinkPad\Utilities\US\PWMRT32V.DLL

MOD - [2012/05/30 15:10:06 | 000,086,016 | ---- | M] () -- C:\Program Files\ThinkPad\ConnectUtilities\AcWrpc.dll

MOD - [2011/12/21 21:59:12 | 000,133,120 | ---- | M] () -- C:\Program Files\Eye-Fi\Helper\libexif.dll

MOD - [2011/12/21 21:56:16 | 000,209,408 | ---- | M] () -- C:\Program Files\Eye-Fi\Helper\libopenraw.dll

MOD - [2011/03/16 12:25:58 | 015,502,336 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe

MOD - [2011/03/16 12:25:58 | 000,159,744 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\rt\jetrt\baseline720.dll

MOD - [2011/03/16 12:25:58 | 000,126,976 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\rt\bin\zip.dll

MOD - [2011/03/16 12:25:58 | 000,069,632 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\rt\bin\java.dll

MOD - [2011/03/16 12:25:58 | 000,020,480 | ---- | M] () -- C:\Users\Roger\AppData\Local\Autobahn\rt\bin\jetvm\jvm.dll

MOD - [2010/12/17 17:13:00 | 000,049,664 | ---- | M] () -- C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll

MOD - [2010/12/17 17:12:56 | 000,332,288 | ---- | M] () -- C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe

MOD - [2009/05/27 21:09:36 | 000,049,976 | ---- | M] () -- C:\Program Files\Lenovo\Message Center Plus\MCPLaunch.exe

MOD - [2008/06/06 16:13:22 | 000,139,264 | ---- | M] () -- c:\Program Files\Common Files\Lenovo\CDRecord.dll

MOD - [2007/06/18 18:28:44 | 000,056,056 | ---- | M] () -- C:\Windows\System32\DLAAPI_W.DLL

MOD - [2007/03/09 18:16:52 | 000,106,496 | R--- | M] () -- C:\Program Files\Lenovo\ATK Hotkey\AGFNEX.dll

========== Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- C:\Users\ADMINI~1\AppData\Local\Temp\DX9\SessionLauncher.exe -- (SessionLauncher)

SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)

SRV - [2014/01/01 15:10:48 | 000,050,344 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)

SRV - [2013/12/12 05:11:12 | 000,257,416 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013/09/23 02:21:16 | 000,050,128 | ---- | M] (Google Inc.) [Auto | Running] -- C:\Program Files\Google\Chrome Remote Desktop\30.0.1599.56\remoting_host.exe -- (chromoting)

SRV - [2013/06/21 08:53:36 | 000,162,408 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2013/05/10 02:57:22 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012/09/24 06:36:00 | 001,666,112 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files\ThinkPad\Utilities\PWMDBSVC.exe -- (Power Manager DBC Service)

SRV - [2012/09/24 06:36:00 | 001,665,088 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\ThinkPad\Utilities\PWMEWSVC.exe -- (PwmEWSvc)

SRV - [2012/05/30 16:59:32 | 000,273,504 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe -- (AcSvc)

SRV - [2012/05/30 16:59:30 | 000,134,240 | ---- | M] (Lenovo) [Auto | Running] -- C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe -- (AcPrfMgrSvc)

SRV - [2011/07/25 22:14:00 | 000,028,672 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\System Update\SUService.exe -- (SUService)

SRV - [2011/07/12 15:54:02 | 000,127,336 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe -- (Lenovo.VIRTSCRLSVC)

SRV - [2011/07/12 15:53:18 | 000,142,696 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe -- (TPHKSVC)

SRV - [2011/01/23 16:29:38 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2009/03/04 20:54:34 | 000,750,904 | ---- | M] (Lenovo Group Limited) [Auto | Running] -- c:\Program Files\Common Files\Lenovo\tvt_reg_monitor_svc.exe -- (ThinkVantage Registry Monitor Service)

SRV - [2008/10/09 04:05:16 | 000,360,448 | ---- | M] (Lenovo Group Limited) [Auto | Stopped] -- C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe -- (TVT_UpdateMonitor)

SRV - [2008/06/06 16:26:38 | 000,520,192 | ---- | M] () [Auto | Running] -- C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe -- (TVT Backup Protection Service)

SRV - [2008/04/25 10:18:10 | 000,362,992 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe -- (Roxio Upnp Server 10)

SRV - [2008/04/25 10:18:02 | 000,313,840 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe -- (Roxio UPnP Renderer 10)

SRV - [2008/04/25 10:16:04 | 000,309,744 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe -- (RoxLiveShare10)

SRV - [2008/04/25 10:15:58 | 000,166,384 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe -- (RoxWatch10)

SRV - [2008/04/25 10:15:24 | 001,120,752 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe -- (RoxMediaDB10)

SRV - [2008/04/07 21:58:20 | 000,166,376 | ---- | M] (Digital Delivery Networks, Inc.) [Auto | Running] -- C:\Program Files\DDNI\DIBS\DDNIService.exe -- (DDNIService)

SRV - [2008/03/19 23:46:44 | 000,208,896 | R--- | M] () [Auto | Running] -- C:\Program Files\Lenovo\ATK Hotkey\LFKAS.exe -- (LFKAS)

SRV - [2008/01/20 21:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)

SRV - [2008/01/11 19:50:16 | 000,030,312 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe -- (BcmSqlStartupSvc)

SRV - [2007/10/30 13:35:20 | 000,094,208 | R--- | M] () [Auto | Running] -- C:\Program Files\Lenovo\ATK Hotkey\GFNEXSrv.exe -- (ATKGFNEXSrv)

SRV - [2007/10/02 23:53:00 | 000,094,208 | R--- | M] () [Auto | Running] -- C:\Program Files\Lenovo\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)

SRV - [2007/09/11 00:45:04 | 000,124,832 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)

SRV - [2007/05/31 15:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)

SRV - [2007/05/31 15:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)

SRV - [2007/02/07 23:06:10 | 000,049,152 | ---- | M] (UltiDev LLC) [Auto | Running] -- C:\Program Files\UltiDev\Cassini Web Server for ASP.NET 2.0\UltiDevCassinWebServer2a.exe -- (UltiDev Cassini Web Server for ASP.NET 2.0)

SRV - [2007/01/04 21:48:52 | 000,112,152 | R--- | M] (InterVideo) [Auto | Running] -- C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe -- (IviRegMgr)

SRV - [2006/11/20 12:35:00 | 000,356,864 | ---- | M] (CSR, plc) [Auto | Running] -- C:\Windows\System32\HFGService.dll -- (HFGService)

========== Driver Services (All) ==========

DRV - [2014/01/01 15:11:03 | 000,775,952 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)

DRV - [2014/01/01 15:11:03 | 000,180,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)

DRV - [2014/01/01 15:11:03 | 000,057,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)

DRV - [2014/01/01 15:11:02 | 000,410,528 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)

DRV - [2014/01/01 15:11:02 | 000,067,824 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV - [2014/01/01 15:11:02 | 000,054,832 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (aswRdr)

DRV - [2013/12/14 14:19:16 | 000,049,944 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)

DRV - [2013/07/31 22:16:32 | 000,638,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dxgkrnl.sys -- (DXGKrnl)

DRV - [2013/07/12 04:04:32 | 000,134,272 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbvideo.sys -- (usbvideo)

DRV - [2013/07/12 04:04:18 | 000,073,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\USBAUDIO.sys -- (usbaudio)

DRV - [2013/07/04 23:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tcpip.sys -- (Tcpip6)

DRV - [2013/07/04 23:53:33 | 000,905,664 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\tcpip.sys -- (Tcpip)

DRV - [2013/06/28 20:42:51 | 000,197,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbhub.sys -- (usbhub)

DRV - [2013/06/28 20:42:33 | 000,073,216 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbccgp.sys -- (usbccgp)

DRV - [2013/06/28 20:42:25 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbehci.sys -- (usbehci)

DRV - [2013/06/28 20:42:24 | 000,023,552 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbuhci.sys -- (usbuhci)

DRV - [2013/06/26 18:01:59 | 000,527,064 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\Wdf01000.sys -- (Wdf01000)

DRV - [2013/06/15 06:23:33 | 000,024,064 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tssecsrv.sys -- (tssecsrv)

DRV - [2013/03/03 14:07:52 | 001,082,232 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\ntfs.sys -- (Ntfs)

DRV - [2013/02/11 20:57:27 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usb8023x.sys -- (usb_rndisx)

DRV - [2013/02/11 13:43:40 | 000,299,840 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cbfs3.sys -- (cbfs3)

DRV - [2012/09/24 06:36:00 | 000,018,280 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\System32\drivers\TPPWR32V.SYS -- (TPPWRIF)

DRV - [2012/08/29 01:24:50 | 000,083,168 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)

DRV - [2012/08/21 06:47:42 | 000,224,640 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volsnap.sys -- (volsnap)

DRV - [2012/07/25 21:33:43 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WUDFPf.sys -- (WudfPf)

DRV - [2012/07/25 21:32:51 | 000,155,136 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WUDFRd.sys -- (WUDFRd)

DRV - [2012/06/04 10:26:04 | 000,440,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ksecdd.sys -- (KSecDD)

DRV - [2012/05/06 15:41:47 | 000,033,536 | ---- | M] (Lenovo) [File_System | Auto | Running] -- C:\Windows\System32\drivers\tvtfilter.sys -- (tvtfilter)

DRV - [2012/05/01 09:03:49 | 000,180,736 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rdpwd.sys -- (RDPWD)

DRV - [2012/03/20 18:28:50 | 000,053,120 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\partmgr.sys -- (partmgr)

DRV - [2012/02/29 08:32:37 | 000,012,800 | ---- | M] (Microsoft Corporation) [Recognizer | System | Unknown] -- C:\Windows\System32\drivers\fs_rec.sys -- (Fs_Rec)

DRV - [2011/12/01 11:05:18 | 000,005,120 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SSPORT.SYS -- (SSPORT)

DRV - [2011/10/13 18:01:26 | 009,037,312 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\igdkmd32.sys -- (igfx)

DRV - [2011/07/06 10:31:47 | 000,214,016 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb10.sys -- (mrxsmb10)

DRV - [2011/04/29 08:25:10 | 000,146,432 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv2.sys -- (srv2)

DRV - [2011/04/29 08:25:09 | 000,102,400 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srvnet.sys -- (srvnet)

DRV - [2011/04/29 08:24:42 | 000,079,872 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb20.sys -- (mrxsmb20)

DRV - [2011/04/29 08:24:40 | 000,106,496 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxsmb.sys -- (mrxsmb)

DRV - [2011/04/21 08:58:27 | 000,273,408 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\afd.sys -- (AFD)

DRV - [2011/04/21 08:55:05 | 000,508,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bthport.sys -- (BTHPORT)

DRV - [2011/04/14 09:59:03 | 000,075,264 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\dfsc.sys -- (DfsC)

DRV - [2011/03/29 18:14:08 | 000,122,992 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ApsX86.sys -- (Shockprf)

DRV - [2011/03/29 18:12:16 | 000,020,592 | ---- | M] (Lenovo.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ApsHM86.sys -- (TPDIGIMN)

DRV - [2011/02/22 08:23:55 | 000,069,632 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\bowser.sys -- (bowser)

DRV - [2011/02/18 09:03:32 | 000,305,152 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\srv.sys -- (srv)

DRV - [2010/09/07 13:09:06 | 000,013,680 | ---- | M] (Lenovo Group Limited) [Kernel | System | Running] -- C:\Windows\System32\drivers\smiif32.sys -- (lenovo.smi)

DRV - [2010/07/29 04:22:12 | 000,023,920 | ---- | M] (MediaMall Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\povrtdev.sys -- (msvad_simple)

DRV - [2010/07/12 13:36:10 | 000,045,648 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pxhelp20.sys -- (PxHelp20)

DRV - [2010/06/23 09:21:32 | 000,259,176 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)

DRV - [2010/04/27 15:19:26 | 001,214,976 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)

DRV - [2010/04/22 23:17:40 | 000,244,784 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SynTP.sys -- (SynTP)

DRV - [2010/02/20 15:53:34 | 000,411,648 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\http.sys -- (HTTP)

DRV - [2010/02/18 06:28:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tunnel.sys -- (tunnel)

DRV - [2009/12/08 12:26:18 | 000,030,720 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\tcpipreg.sys -- (tcpipreg)

DRV - [2009/09/30 20:01:54 | 000,040,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WpdUsb.sys -- (WpdUsb)

DRV - [2009/07/24 18:28:50 | 000,030,560 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\nx6000.sys -- (MSHUSBVideo)

DRV - [2009/07/13 18:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUSB)

DRV - [2009/06/17 08:23:23 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\BTHUSB.SYS -- (BTHUSB)

DRV - [2009/06/16 04:05:38 | 000,030,144 | ---- | M] (Lenovo (United States) Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\psadd.sys -- (psadd)

DRV - [2009/06/11 16:04:22 | 003,486,208 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\snp2uvc.sys -- (SNP2UVC)

DRV - [2009/04/29 06:19:08 | 000,560,640 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\hdaudbus.sys -- (HDAudBus)

DRV - [2009/04/11 01:33:03 | 000,292,840 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgrx.sys -- (volmgrx)

DRV - [2009/04/11 01:32:55 | 000,149,480 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\pci.sys -- (pci)

DRV - [2009/04/11 01:32:52 | 000,053,224 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\termdd.sys -- (TermDD)

DRV - [2009/04/11 01:32:49 | 000,527,848 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ndis.sys -- (NDIS)

DRV - [2009/04/11 01:32:46 | 000,265,688 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\acpi.sys -- (ACPI)

DRV - [2009/04/11 01:32:46 | 000,245,736 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\clfs.sys -- (CLFS)

DRV - [2009/04/11 01:32:46 | 000,190,424 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fltMgr.sys -- (FltMgr)

DRV - [2009/04/11 01:32:46 | 000,180,712 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\msiscsi.sys -- (iScsiPrt)

DRV - [2009/04/11 01:32:46 | 000,161,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\msrpc.sys -- (MsRPC)

DRV - [2009/04/11 01:32:43 | 000,141,288 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\ecache.sys -- (Ecache)

DRV - [2009/04/11 01:32:31 | 000,053,736 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\disk.sys -- (disk)

DRV - [2009/04/11 01:32:31 | 000,048,104 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\mup.sys -- (Mup)

DRV - [2009/04/10 23:46:40 | 000,069,120 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rassstp.sys -- (RasSstp)

DRV - [2009/04/10 23:46:32 | 000,121,344 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndiswan.sys -- (NdisWan)

DRV - [2009/04/10 23:46:30 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspppoe.sys -- (RasPppoe)

DRV - [2009/04/10 23:45:56 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\tdx.sys -- (tdx)

DRV - [2009/04/10 23:45:51 | 000,072,192 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\pacer.sys -- (PSched)

DRV - [2009/04/10 23:45:37 | 000,185,856 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\netbt.sys -- (netbt)

DRV - [2009/04/10 23:45:22 | 000,066,560 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\smb.sys -- (Smb)

DRV - [2009/04/10 23:43:28 | 000,148,480 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nwifi.sys -- (NativeWifiP)

DRV - [2009/04/10 23:43:12 | 000,148,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rfcomm.sys -- (RFCOMM)

DRV - [2009/04/10 23:43:10 | 000,022,528 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bthenum.sys -- (BthEnum)

DRV - [2009/04/10 23:43:04 | 000,062,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ohci1394.sys -- (ohci1394)

DRV - [2009/04/10 23:43:02 | 000,236,544 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HdAudio.sys -- (HdAudAddService)

DRV - [2009/04/10 23:42:55 | 000,065,536 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\USBSTOR.SYS -- (USBSTOR)

DRV - [2009/04/10 23:42:48 | 000,012,800 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hidusb.sys -- (HidUsb)

DRV - [2009/04/10 23:39:17 | 000,067,072 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\cdrom.sys -- (cdrom)

DRV - [2009/04/10 23:39:13 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_sd.sys -- (sffp_sd)

DRV - [2009/04/10 23:38:40 | 000,017,408 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\kbdhid.sys -- (kbdhid)

DRV - [2009/04/10 23:19:14 | 000,089,088 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\sdbus.sys -- (sdbus)

DRV - [2009/04/10 23:14:40 | 000,114,688 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mrxdav.sys -- (MRxDAV)

DRV - [2009/04/10 23:14:29 | 000,225,280 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\rdbss.sys -- (rdbss)

DRV - [2009/04/10 23:14:01 | 000,035,328 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\npfs.sys -- (Npfs)

DRV - [2009/04/10 23:13:59 | 000,226,816 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\udfs.sys -- (udfs)

DRV - [2009/04/10 23:13:53 | 000,136,704 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\exfat.sys -- (exfat)

DRV - [2009/04/10 23:13:52 | 000,142,848 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\fastfat.sys -- (fastfat)

DRV - [2009/02/11 16:11:50 | 000,329,752 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStor.sys -- (iaStor)

DRV - [2008/09/21 15:49:36 | 000,112,128 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)

DRV - [2008/09/17 21:14:44 | 000,251,392 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)

DRV - [2008/05/24 17:28:22 | 000,048,192 | ---- | M] (Lenovo) [Kernel | System | Stopped] -- C:\Windows\System32\drivers\tvtumon.sys -- (tvtumon)

DRV - [2008/05/14 04:36:00 | 000,022,312 | ---- | M] (Lenovo.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ibmpmdrv.sys -- (IBMPMDRV)

DRV - [2008/05/06 16:06:00 | 000,011,520 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)

DRV - [2008/04/18 18:40:24 | 000,128,104 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\WimFltr.sys -- (WimFltr)

DRV - [2008/04/16 13:51:56 | 000,022,784 | ---- | M] (Research In Motion Limited) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RimUsb.sys -- (RimUsb)

DRV - [2008/03/25 01:41:30 | 000,980,992 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_DPV.sys -- (HSF_DPV)

DRV - [2008/03/25 01:39:20 | 000,207,872 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSXHWAZL.sys -- (HSXHWAZL)

DRV - [2008/03/25 01:38:32 | 000,661,504 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HSX_CNXT.sys -- (winachsf)

DRV - [2008/02/15 19:42:42 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)

DRV - [2008/01/20 21:24:57 | 000,031,744 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\modem.sys -- (Modem)

DRV - [2008/01/20 21:24:55 | 000,076,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rasl2tp.sys -- (Rasl2tp)

DRV - [2008/01/20 21:24:55 | 000,062,976 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\raspptp.sys -- (PptpMiniport)

DRV - [2008/01/20 21:24:55 | 000,016,896 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndisuio.sys -- (Ndisuio)

DRV - [2008/01/20 21:24:51 | 000,006,016 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mstee.sys -- (MSTEE)

DRV - [2008/01/20 21:24:51 | 000,005,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mspclock.sys -- (MSPCLOCK)

DRV - [2008/01/20 21:24:51 | 000,005,504 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mspqm.sys -- (MSPQM)

DRV - [2008/01/20 21:24:50 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\vga.sys -- (VgaSave)

DRV - [2008/01/20 21:24:50 | 000,008,192 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mskssrv.sys -- (MSKSSRV)

DRV - [2008/01/20 21:24:50 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPENCDD.sys -- (RDPENCDD)

DRV - [2008/01/20 21:24:47 | 000,064,000 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mpsdrv.sys -- (mpsdrv)

DRV - [2008/01/20 21:24:47 | 000,016,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\nsiproxy.sys -- (nsiproxy)

DRV - [2008/01/20 21:24:47 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ws2ifsl.sys -- (ws2ifsl)

DRV - [2008/01/20 21:24:45 | 000,047,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipfltdrv.sys -- (IpFilterDriver)

DRV - [2008/01/20 21:24:37 | 000,084,480 | ---- | M] (Microsoft Corporation) [File_System | Auto | Running] -- C:\Windows\System32\drivers\luafv.sys -- (luafv)

DRV - [2008/01/20 21:24:37 | 000,060,416 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rspndr.sys -- (rspndr)

DRV - [2008/01/20 21:24:37 | 000,047,104 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lltdio.sys -- (lltdio)

DRV - [2008/01/20 21:24:25 | 000,100,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ipnat.sys -- (IPNAT)

DRV - [2008/01/20 21:24:25 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\wanarp.sys -- (Wanarpv6)

DRV - [2008/01/20 21:24:25 | 000,062,464 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wanarp.sys -- (Wanarp)

DRV - [2008/01/20 21:24:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndproxy.sys -- (NDProxy)

DRV - [2008/01/20 21:24:25 | 000,020,992 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ndistapi.sys -- (NdisTapi)

DRV - [2008/01/20 21:24:25 | 000,015,360 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TUNMP.SYS -- (tunmp)

DRV - [2008/01/20 21:24:21 | 000,027,648 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\filetrace.sys -- (Filetrace)

DRV - [2008/01/20 21:24:20 | 000,035,840 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\netbios.sys -- (NetBIOS)

DRV - [2008/01/20 21:24:19 | 000,011,776 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\rasacd.sys -- (RasAcd)

DRV - [2008/01/20 21:24:11 | 000,021,048 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\spldr.sys -- (spldr)

DRV - [2008/01/20 21:24:08 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tdtcp.sys -- (TDTCP)

DRV - [2008/01/20 21:24:08 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tdpipe.sys -- (TDPIPE)

DRV - [2008/01/20 21:24:06 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\RDPCDD.sys -- (RDPCDD)

DRV - [2008/01/20 21:24:04 | 000,058,936 | ---- | M] (Microsoft Corporation) [File_System | Boot | Running] -- C:\Windows\System32\drivers\fileinfo.sys -- (FileInfo)

DRV - [2008/01/20 21:24:04 | 000,017,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\asyncmac.sys -- (AsyncMac)

DRV - [2008/01/20 21:23:54 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\irenum.sys -- (IRENUM)

DRV - [2008/01/20 21:23:51 | 000,070,144 | ---- | M] (Microsoft Corporation) [File_System | Disabled | Running] -- C:\Windows\System32\drivers\cdfs.sys -- (cdfs)

DRV - [2008/01/20 21:23:51 | 000,022,528 | ---- | M] (Microsoft Corporation) [File_System | System | Running] -- C:\Windows\System32\drivers\msfs.sys -- (Msfs)

DRV - [2008/01/20 21:23:50 | 000,004,608 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\null.sys -- (Null)

DRV - [2008/01/20 21:23:49 | 000,007,680 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\umpass.sys -- (UMPass)

DRV - [2008/01/20 21:23:44 | 000,006,144 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\beep.sys -- (Beep)

DRV - [2008/01/20 21:23:43 | 000,057,400 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\mountmgr.sys -- (MountMgr)

DRV - [2008/01/20 21:23:31 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\qwavedrv.sys -- (QWAVEdrv)

DRV - [2008/01/20 21:23:27 | 000,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\MegaSR.sys -- (MegaSR)

DRV - [2008/01/20 21:23:27 | 000,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpu320.sys -- (adpu320)

DRV - [2008/01/20 21:23:27 | 000,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\megasas.sys -- (megasas)

DRV - [2008/01/20 21:23:26 | 000,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpu160m.sys -- (adpu160m)

DRV - [2008/01/20 21:23:26 | 000,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sisraid4.sys -- (SiSRaid4)

DRV - [2008/01/20 21:23:26 | 000,045,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\tpm.sys -- (TPM)

DRV - [2008/01/20 21:23:26 | 000,041,016 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sisraid2.sys -- (SiSRaid2)

DRV - [2008/01/20 21:23:26 | 000,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\HpCISSs.sys -- (HpCISSs)

DRV - [2008/01/20 21:23:26 | 000,035,328 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\circlass.sys -- (circlass)

DRV - [2008/01/20 21:23:26 | 000,014,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CmBatt.sys -- (CmBatt)

DRV - [2008/01/20 21:23:25 | 000,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adpahci.sys -- (adpahci)

DRV - [2008/01/20 21:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express)

DRV - [2008/01/20 21:23:25 | 000,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_sas.sys -- (LSI_SAS)

DRV - [2008/01/20 21:23:24 | 001,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ql2300.sys -- (ql2300)

DRV - [2008/01/20 21:23:24 | 000,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60)

DRV - [2008/01/20 21:23:24 | 000,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\arcsas.sys -- (arcsas)

DRV - [2008/01/20 21:23:24 | 000,022,072 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wd.sys -- (Wd)

DRV - [2008/01/20 21:23:23 | 000,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iaStorV.sys -- (iaStorV)

DRV - [2008/01/20 21:23:23 | 000,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\vsmraid.sys -- (vsmraid)

DRV - [2008/01/20 21:23:23 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ulsata2.sys -- (ulsata2)

DRV - [2008/01/20 21:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_scsi.sys -- (LSI_SCSI)

DRV - [2008/01/20 21:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\lsi_fc.sys -- (LSI_FC)

DRV - [2008/01/20 21:23:23 | 000,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\arc.sys -- (arc)

DRV - [2008/01/20 21:23:23 | 000,035,384 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\kbdclass.sys -- (kbdclass)

DRV - [2008/01/20 21:23:23 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffdisk.sys -- (sffdisk)

DRV - [2008/01/20 21:23:23 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sffp_mmc.sys -- (sffp_mmc)

DRV - [2008/01/20 21:23:22 | 000,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\elxstor.sys -- (elxstor)

DRV - [2008/01/20 21:23:22 | 000,200,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTAZL3.SYS -- (HSFHWAZL)

DRV - [2008/01/20 21:23:22 | 000,064,512 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\IPMIDrv.sys -- (IPMIDRV)

DRV - [2008/01/20 21:23:22 | 000,061,496 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\GAGP30KX.SYS -- (gagp30kx)

DRV - [2008/01/20 21:23:22 | 000,059,448 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\UAGP35.SYS -- (uagp35)

DRV - [2008/01/20 21:23:22 | 000,041,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\monitor.sys -- (monitor)

DRV - [2008/01/20 21:23:22 | 000,034,816 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\umbus.sys -- (umbus)

DRV - [2008/01/20 21:23:22 | 000,024,632 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\crcdisk.sys -- (crcdisk)

DRV - [2008/01/20 21:23:22 | 000,018,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\usbprint.sys -- (usbprint)

DRV - [2008/01/20 21:23:21 | 000,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\adp94xx.sys -- (adp94xx)

DRV - [2008/01/20 21:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvraid.sys -- (nvraid)

DRV - [2008/01/20 21:23:21 | 000,094,776 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\msdsm.sys -- (msdsm)

DRV - [2008/01/20 21:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nvstor.sys -- (nvstor)

DRV - [2008/01/20 21:23:21 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\drmkaud.sys -- (drmkaud)

DRV - [2008/01/20 21:23:20 | 000,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\uliahci.sys -- (uliahci)

DRV - [2008/01/20 21:23:20 | 000,105,016 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\mpio.sys -- (mpio)

DRV - [2008/01/20 21:23:20 | 000,092,160 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bthpan.sys -- (BthPan)

DRV - [2008/01/20 21:23:20 | 000,054,784 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\i8042prt.sys -- (i8042prt)

DRV - [2008/01/20 21:23:20 | 000,034,360 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\mouclass.sys -- (mouclass)

DRV - [2008/01/20 21:23:20 | 000,025,088 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\fdc.sys -- (fdc)

DRV - [2008/01/20 21:23:20 | 000,020,480 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\flpydisk.sys -- (flpydisk)

DRV - [2008/01/20 21:23:20 | 000,019,968 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sermouse.sys -- (sermouse)

DRV - [2008/01/20 21:23:20 | 000,015,872 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mouhid.sys -- (mouhid)

DRV - [2008/01/20 21:23:03 | 000,179,256 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\pcmcia.sys -- (pcmcia)

DRV - [2008/01/20 21:23:02 | 000,030,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\i2omp.sys -- (i2omp)

DRV - [2008/01/20 21:23:02 | 000,026,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vgapnp.sys -- (vga)

DRV - [2008/01/20 21:23:01 | 000,248,832 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\rdpdr.sys -- (rdpdr)

DRV - [2008/01/20 21:23:01 | 000,109,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NV_AGP.SYS -- (nv_agp)

DRV - [2008/01/20 21:23:01 | 000,060,984 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ULIAGPKX.SYS -- (uliagpkx)

DRV - [2008/01/20 21:23:01 | 000,057,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AMDAGP.SYS -- (amdagp)

DRV - [2008/01/20 21:23:01 | 000,056,888 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VIAAGP.SYS -- (viaagp)

DRV - [2008/01/20 21:23:01 | 000,056,376 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AGP440.sys -- (agp440)

DRV - [2008/01/20 21:23:01 | 000,055,864 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SISAGP.SYS -- (sisagp)

DRV - [2008/01/20 21:23:01 | 000,052,792 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\volmgr.sys -- (volmgr)

DRV - [2008/01/20 21:23:01 | 000,049,720 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\isapnp.sys -- (isapnp)

DRV - [2008/01/20 21:23:01 | 000,045,568 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\blbdrive.sys -- (blbdrive)

DRV - [2008/01/20 21:23:01 | 000,031,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mssmbios.sys -- (mssmbios)

DRV - [2008/01/20 21:23:01 | 000,016,440 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\msisadrv.sys -- (msisadrv)

DRV - [2008/01/20 21:23:01 | 000,015,288 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\swenum.sys -- (swenum)

DRV - [2008/01/20 21:23:00 | 000,044,032 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdk8.sys -- (AmdK8)

DRV - [2008/01/20 21:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\viac7.sys -- (ViaC7)

DRV - [2008/01/20 21:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\intelppm.sys -- (intelppm)

DRV - [2008/01/20 21:23:00 | 000,041,472 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdk7.sys -- (AmdK7)

DRV - [2008/01/20 21:23:00 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\processr.sys -- (Processor)

DRV - [2008/01/20 21:23:00 | 000,040,960 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\crusoe.sys -- (Crusoe)

DRV - [2008/01/20 21:23:00 | 000,028,728 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\msahci.sys -- (msahci)

DRV - [2008/01/20 21:23:00 | 000,021,560 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\atapi.sys -- (atapi)

DRV - [2008/01/20 21:23:00 | 000,020,792 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\compbatt.sys -- (Compbatt)

DRV - [2008/01/20 21:23:00 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\viaide.sys -- (viaide)

DRV - [2008/01/20 21:23:00 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\cmdide.sys -- (cmdide)

DRV - [2008/01/20 21:23:00 | 000,017,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\intelide.sys -- (intelide)

DRV - [2008/01/20 21:23:00 | 000,017,976 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\amdide.sys -- (amdide)

DRV - [2008/01/20 21:23:00 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\aliide.sys -- (aliide)

DRV - [2008/01/20 21:23:00 | 000,016,440 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\pciide.sys -- (pciide)

DRV - [2008/01/20 21:23:00 | 000,011,264 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wmiacpi.sys -- (WmiAcpi)

DRV - [2008/01/20 21:23:00 | 000,006,656 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\errdev.sys -- (ErrDev)

DRV - [2007/10/18 01:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)

DRV - [2007/08/31 17:33:22 | 000,479,744 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)

DRV - [2007/08/31 14:14:40 | 000,038,656 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)

DRV - [2007/07/30 13:54:02 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)

DRV - [2007/07/30 12:42:58 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)

DRV - [2007/07/24 13:09:04 | 000,013,880 | R--- | M] () [Kernel | Auto | Running] -- C:\Program Files\Lenovo\ATK Hotkey\ASMMAP.sys -- (ASMMAP)

DRV - [2007/06/18 18:29:56 | 000,009,400 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLADResM.SYS -- (DLADResM)

DRV - [2007/06/18 18:29:10 | 000,035,064 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLABMFSM.SYS -- (DLABMFSM)

DRV - [2007/06/18 18:29:08 | 000,093,752 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLAUDFAM.SYS -- (DLAUDFAM)

DRV - [2007/06/18 18:29:06 | 000,098,136 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLAUDF_M.SYS -- (DLAUDF_M)

DRV - [2007/06/18 18:29:04 | 000,026,744 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLAOPIOM.SYS -- (DLAOPIOM)

DRV - [2007/06/18 18:28:58 | 000,032,472 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLABOIOM.SYS -- (DLABOIOM)

DRV - [2007/06/18 18:28:54 | 000,014,520 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLAPoolM.SYS -- (DLAPoolM)

DRV - [2007/06/18 18:28:52 | 000,105,048 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\DLA\DLAIFS_M.SYS -- (DLAIFS_M)

DRV - [2007/03/12 03:25:28 | 000,099,848 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\DRVMCDB.SYS -- (DRVMCDB)

DRV - [2007/02/09 14:34:16 | 000,051,768 | ---- | M] (Roxio) [File_System | Auto | Running] -- C:\Windows\System32\drivers\DRVNDDM.SYS -- (DRVNDDM)

DRV - [2007/02/08 22:05:30 | 000,028,120 | ---- | M] (Roxio) [File_System | System | Running] -- C:\Windows\System32\drivers\DLARTL_M.SYS -- (DLARTL_M)

DRV - [2007/02/08 22:05:30 | 000,012,856 | ---- | M] (Roxio) [File_System | System | Running] -- C:\Windows\System32\drivers\DLACDBHM.SYS -- (DLACDBHM)

DRV - [2006/12/14 17:11:58 | 000,007,680 | ---- | M] (ATK0100) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\A0101V32.sys -- (MTsensor)

DRV - [2006/11/20 12:35:00 | 000,029,184 | ---- | M] (CSR, plc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BthAudioHF.sys -- (BthAudioHF)

DRV - [2006/11/02 04:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ql40xx.sys -- (ql40xx)

DRV - [2006/11/02 04:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ulsata.sys -- (UlSata)

DRV - [2006/11/02 04:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\nfrd960.sys -- (nfrd960)

DRV - [2006/11/02 04:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iirsp.sys -- (iirsp)

DRV - [2006/11/02 04:50:16 | 000,076,392 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sbp2port.sys -- (sbp2port)

DRV - [2006/11/02 04:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\djsvs.sys -- (aic78xx)

DRV - [2006/11/02 04:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iteraid.sys -- (iteraid)

DRV - [2006/11/02 04:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\iteatapi.sys -- (iteatapi)

DRV - [2006/11/02 04:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\symc8xx.sys -- (Symc8xx)

DRV - [2006/11/02 04:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sym_u3.sys -- (Sym_u3)

DRV - [2006/11/02 04:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\Mraid35x.sys -- (Mraid35x)

DRV - [2006/11/02 04:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sym_hi.sys -- (Sym_hi)

DRV - [2006/11/02 04:04:35 | 000,878,080 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\PEAuth.sys -- (PEAUTH)

DRV - [2006/11/02 03:55:23 | 000,039,936 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\bthmodem.sys -- (BTHMODEM)

DRV - [2006/11/02 03:55:22 | 000,029,184 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\hidbth.sys -- (HidBth)

DRV - [2006/11/02 03:55:09 | 000,068,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\usbcir.sys -- (usbcir)

DRV - [2006/11/02 03:55:05 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\usbohci.sys -- (usbohci)

DRV - [2006/11/02 03:55:01 | 000,021,504 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\hidir.sys -- (HidIr)

DRV - [2006/11/02 03:52:52 | 000,020,608 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\wacompen.sys -- (WacomPen)

DRV - [2006/11/02 03:51:40 | 000,013,312 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sfloppy.sys -- (sfloppy)

DRV - [2006/11/02 03:51:30 | 000,083,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serial.sys -- (Serial)

DRV - [2006/11/02 03:51:30 | 000,079,360 | ---- | M] (Microsoft Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\parport.sys -- (Parport)

DRV - [2006/11/02 03:51:25 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\serenum.sys -- (Serenum)

DRV - [2006/11/02 03:51:23 | 000,008,704 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\Windows\System32\drivers\parvdm.sys -- (Parvdm)

DRV - [2006/11/02 03:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrSerId.sys -- (Brserid)

DRV - [2006/11/02 03:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrUsbSer.sys -- (BrUsbSer)

DRV - [2006/11/02 03:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltUp.sys -- (BrFiltUp)

DRV - [2006/11/02 03:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BrFiltLo.sys -- (BrFiltLo)

DRV - [2006/11/02 03:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrSerWdm.sys -- (BrSerWdm)

DRV - [2006/11/02 03:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\BrUsbMdm.sys -- (BrUsbMdm)

DRV - [2006/11/02 02:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ntrigdigi.sys -- (ntrigdigi)

DRV - [2006/11/02 02:10:22 | 000,002,864 | ---- | M] (Microsoft Corporation) [Adapter | On_Demand | Unknown] -- C:\Windows\System32\WINSOCK.DLL -- (Winsock)

DRV - [2006/11/02 01:37:21 | 000,020,480 | ---- | M] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\secdrv.sys -- (secdrv)

DRV - [2006/06/18 08:26:58 | 000,012,672 | ---- | M] (Conexant) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\mdmxsdk.sys -- (mdmxsdk)

DRV - [1999/08/12 05:59:08 | 000,034,916 | ---- | M] (Marimba, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\MrtRate.sys -- (mrtRate)

tillerr · January 12, 2014

Part 2 of OTL.Txt

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.live.com

IE - HKLM\..\SearchScopes,DefaultScope =

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.live.com

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad [binary data]

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.yahoo.com?type=714647&fr=spigot-yhp-ie

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\SearchScopes,DefaultScope =

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\SearchScopes\{B462E133-8583-40A0-9CE4-7525667C3C7C}: "URL" = http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\SearchScopes\{F9AEFDDC-1811-42EC-8463-E1FEF940F744}: "URL" = http://www.mypoints.com/emp/u/mysearch.vm?q={searchTerms}&mypoints_brw=1

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: C:\Program Files\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.40.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player: C:\Users\Roger\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll (Move Networks)

FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)

FF - HKCU\Software\MozillaPlugins\@talk.google.com/O1DPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)

FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Roger\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Roger\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101710.dll (Amazon.com, Inc.)

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\moveplayer@movenetworks.com: C:\Users\Roger\AppData\Roaming\Move Networks [2009/12/12 11:17:59 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{FCF36B88-1BBA-487f-B64B-D2E8980A9293}: C:\Program Files\Lenovo\Client Security Solution\PWM Firefox Extension [2012/05/06 16:04:14 | 000,000,000 | ---D | M]

[2012/07/04 09:10:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Roger\AppData\Roaming\mozilla\Firefox\extensions

[2012/07/04 09:10:19 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Roger\AppData\Roaming\mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}

[2010/07/07 05:51:33 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions

[2010/04/21 16:34:27 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2008/09/03 19:11:24 | 000,054,600 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\mozilla firefox\plugins\npbittorrent.dll

[2010/01/03 18:54:06 | 000,393,216 | ---- | M] (Invenda Corporation) -- C:\Program Files\mozilla firefox\plugins\NPcol400.dll

[2010/04/12 16:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},

CHR - homepage: https://mail.google.com/mail/#inbox

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\31.0.1650.63\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll

CHR - plugin: QuickTime Plug-in 7.7.3 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll

CHR - plugin: CouponNetwork Coupon Activator Netscape Plugin v. 5.0.0.0 (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\plugins\NPcol400.dll

CHR - plugin: CouponNetwork Coupon Activator Netscape Plugin v. 5.0.0.0 (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\plugins\NPcol500.dll

CHR - plugin: Coupons Inc., Coupon Printer Manager (Enabled) = C:\Users\Roger\AppData\Local\Google\Chrome\Application\plugins\npMozCouponPrinter.dll

CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll

CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll

CHR - plugin: Google Talk Plugin Video Renderer (Enabled) = C:\Users\Roger\AppData\Roaming\Mozilla\plugins\npo1d.dll

CHR - plugin: AmazonMP3DownloaderPlugin (Enabled) = C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101710.dll

CHR - plugin: DNA Plug-in (Enabled) = C:\Program Files\DNA\plugins\npbtdna.dll

CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

CHR - plugin: DivX Plus Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files\Google\Picasa3\npPicasa3.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll

CHR - plugin: Java Platform SE 7 U15 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

CHR - plugin: Move Streaming Media Player (Enabled) = C:\Users\Roger\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll

CHR - plugin: Java Deployment Toolkit 7.0.150.3 (Enabled) = C:\Windows\system32\npDeployJava1.dll

CHR - Extension: Google Docs = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\

CHR - Extension: Google Drive = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: Google Voice Search Hotword (Beta) = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.0.5_0\

CHR - Extension: Google Cast = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\boadgeojelhgndaghljhdicfkmllpafd\14.102.1.1_0\

CHR - Extension: Math Invaders = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfndgfelifpjlkcpbnjgegkbajimhmce\1.1_0\

CHR - Extension: Google Keep = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki\2.0.14025.1345_0\

CHR - Extension: Google Wallet = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0\

CHR - Extension: Google Chrome to Phone Extension = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\oadboiipflhobonjjffjbfekfjcgkhco\2.3.3_0\

CHR - Extension: Google Calendar Checker (by Google) = C:\Users\Roger\AppData\Local\Google\Chrome\User Data\Default\Extensions\ookhcbgokankfmjafalglpofmolfopek\1.4.0_0\

O1 HOSTS File: ([2006/09/18 16:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O1 - Hosts: ::1 localhost

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (no name) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - No CLSID value found.

O2 - BHO: (IePasswordManagerHelper Class) - {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (avast! Online Security) - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)

O3 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.

O4 - HKLM..\Run: [] File not found

O4 - HKLM..\Run: [ACTray] C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe (Lenovo)

O4 - HKLM..\Run: [ACWlIcon] C:\Program Files\ThinkPad\ConnectUtilities\ACWLIcon.exe (Lenovo)

O4 - HKLM..\Run: [Adobe Photo Downloader] C:\Program Files\Adobe\Photoshop Elements 6.0\apdproxy.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)

O4 - HKLM..\Run: [bitcasa] C:\Program Files\Bitcasa\Bitcasa.exe ()

O4 - HKLM..\Run: [bLOG] C:\Program Files\ThinkPad\Utilities\BTVLOGEX.DLL ()

O4 - HKLM..\Run: [CameraApplicationLauncher] C:\Program Files\Lenovo\Camera Center\bin\CameraApplicationLaunchPadLauncher.exe ()

O4 - HKLM..\Run: [CDAServer] C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe ()

O4 - HKLM..\Run: [CreateLMBCShortCut] C:\Program Files\Lenovo\Mobile Broadband Connect\UserShortcutCreator.exe ()

O4 - HKLM..\Run: [DivXMediaServer] C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe File not found

O4 - HKLM..\Run: [iXL_MiddleWare] C:\Program Files\Fisher-Price\iXL\iXL.Middleware.exe (Fisher-Price)

O4 - HKLM..\Run: [LPMailChecker] C:\Program Files\Lenovo\LenovoCare\LPMLCHK.EXE (Lenovo Group Limited)

O4 - HKLM..\Run: [LPManager] C:\Program Files\Lenovo\LenovoCare\LPMGR.EXE (Lenovo Group Limited)

O4 - HKLM..\Run: [Message Center Plus] C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe ()

O4 - HKLM..\Run: [Nikon Message Center 2] C:\Program Files\Nikon\Nikon Message Center 2\NkMC2.exe (Nikon Corporation)

O4 - HKLM..\Run: [PWMTRV] C:\Program Files\ThinkPad\Utilities\PWMTR32V.DLL (Lenovo Group Limited)

O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe (Sonic Solutions)

O4 - HKLM..\Run: [TPFNF7] C:\Program Files\Lenovo\NPDIRECT\tpfnf7sp.exe (Lenovo Group Limited)

O4 - HKLM..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\LVOSDSVC.exe (Lenovo Group Limited)

O4 - HKLM..\Run: [tsnp2uvc] C:\Windows\tsnp2uvc.exe File not found

O4 - HKLM..\Run: [tvncontrol] "C:\Program Files\TightVNC\tvnserver.exe" -controlservice -slave File not found

O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)

O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [Akamai NetSession Interface] C:\Users\Roger\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [Eye-Fi] C:\Program Files\Eye-Fi\Helper\EyeFiHelper.exe (Eye-Fi, Inc.)

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [GoogleDriveSync] C:\Program Files\Google\Drive\googledrivesync.exe (Google)

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [MusicManager] C:\Users\Roger\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Google Inc.)

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [PlayOn] C:\Program Files\MediaMall\PlayOn.exe File not found

O4 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003..\Run: [unified Remote v2] C:\Program Files\Unified Remote\RemoteServer.exe (Unified Intents AB)

O4 - HKU\.DEFAULT..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe -update activex File not found

O4 - HKU\S-1-5-18..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil32_11_6_602_180_ActiveX.exe -update activex File not found

O4 - Startup: C:\Users\Roger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Roger\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

O4 - Startup: C:\Users\Roger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MLB.TV NexDef Plug-in.lnk = C:\Users\Roger\AppData\Local\Autobahn\mlb-nexdef-autobahn.exe ()

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)

O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)

O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Lenovo Password Manager... - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files\Lenovo\Client Security Solution\tvtpwm_ie_com.dll (Lenovo Group Limited)

O13 - gopher Prefix: missing

O15 - HKU\S-1-5-21-2450559217-1565701889-1815041723-1003\..Trusted Domains: samsungsetup.com ([www] http in Trusted sites)

O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)

O16 - DPF: {28B66320-9687-4B13-8757-36F901887AB5} http://www.seehere.com/ips-opdata/layout/fujius02/objects/canvasx.cab (CanvasX Class)

O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} http://www.seehere.com/ips-opdata/layout/fujius02/objects/jordan.cab (JordanUploader Class)

O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab (Reg Error: Key error.)

O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab (Java Plug-in 10.40.2)

O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)

O16 - DPF: {A1662FB6-39BE-41BB-ACDC-0448FB1B5817} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_5/PhotoCenter_ActiveX_Control.cab (Photo Upload Plugin Class)

O16 - DPF: {BEA7310D-06C4-4339-A784-DC3804819809} http://images3.pnimedia.com/ProductAssets/costcous/activex/v3_0_0_7/PhotoCenter_ActiveX_Control.cab (Photo Upload Plugin Class)

O16 - DPF: {CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab (Java Plug-in 1.7.0_40)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_40-windows-i586.cab (Java Plug-in 1.7.0_40)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{140426D0-6910-4F14-8919-DFAEBB0FB1E5}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3F082022-EE99-450D-A077-0BD2ABA0DE56}: DhcpNameServer = 192.168.1.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BFB05876-6208-425A-83A9-D5F28BAD14C2}: DhcpNameServer = 192.168.0.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E81FD4E4-C2E7-4B9A-BB1B-4AB466739CDD}: DhcpNameServer = 192.168.0.1

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation)

O22 - SharedTaskScheduler: {5FF49FE8-B332-4CB9-B102-FB6951629E55} - Virtual Storage Mount Notification - C:\Windows\System32\CbFsMntNtf3.dll (EldoS Corporation)

O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img31.jpg

O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img31.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006/09/18 16:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O32 - AutoRun File - [2010/02/11 22:15:04 | 000,000,000 | ---D | M] - F:\autorun -- [ NTFS ]

O32 - AutoRun File - [2002/10/16 07:56:50 | 000,000,036 | ---- | M] () - F:\autorun.inf -- [ NTFS ]

O32 - AutoRun File - [2008/06/10 11:32:46 | 000,000,049 | -HS- | M] () - Q:\AUTORUN.INF -- [ NTFS ]

O32 - AutoRun File - [2008/06/02 17:46:54 | 000,000,049 | -HS- | M] () - S:\AUTORUN.INF -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2014/01/12 15:15:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Roger\Desktop\OTL.com

[2014/01/12 08:22:52 | 000,000,000 | ---D | C] -- C:\Users\Roger\Desktop\FRST-OlderVersion

[2014/01/12 08:20:56 | 000,448,512 | ---- | C] (OldTimer Tools) -- C:\Users\Roger\Desktop\TFC.exe

[2014/01/11 22:21:49 | 000,000,000 | ---D | C] -- C:\FRST

[2014/01/11 12:39:13 | 000,000,000 | ---D | C] -- C:\Users\Roger\AppData\Roaming\IDM

[2014/01/11 12:33:49 | 001,219,584 | ---- | C] (Farbar) -- C:\Users\Roger\Desktop\FRST.exe

[2014/01/10 15:07:28 | 000,000,000 | ---D | C] -- C:\Windows\ERUNT

[2014/01/10 15:05:55 | 001,037,068 | ---- | C] (Thisisu) -- C:\Users\Roger\Desktop\JRT.exe

[2014/01/10 14:29:28 | 000,000,000 | ---D | C] -- C:\AdwCleaner

[2014/01/01 14:24:56 | 000,000,000 | ---D | C] -- C:\Users\Roger\AppData\Local\Python Keyring

[2014/01/01 14:15:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Package Cache

[2013/12/30 17:35:40 | 000,000,000 | ---D | C] -- C:\Users\Roger\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

[2013/12/14 15:02:26 | 000,000,000 | ---D | C] -- C:\Users\Roger\AppData\Roaming\AVAST Software

[2013/12/14 14:20:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast

[2013/12/14 14:15:18 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software

[2013/12/14 11:30:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2014/01/12 15:29:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/01/12 15:17:00 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Roger\Desktop\OTL.com

[2014/01/12 15:11:35 | 000,000,830 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/01/12 14:46:13 | 000,000,908 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2450559217-1565701889-1815041723-1003UA.job

[2014/01/12 13:36:31 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2014/01/12 13:36:31 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2014/01/12 13:00:42 | 000,000,466 | ---- | M] () -- C:\Windows\tasks\SystemToolsDailyTest.job

[2014/01/12 11:36:30 | 000,000,880 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/01/12 11:36:23 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/01/12 11:36:21 | 3184,840,704 | -HS- | M] () -- C:\hiberfil.sys

[2014/01/12 11:31:11 | 000,005,332 | ---- | M] () -- C:\Windows\bthservsdp.dat

[2014/01/12 09:46:23 | 000,000,856 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2450559217-1565701889-1815041723-1003Core.job

[2014/01/12 08:22:52 | 001,219,584 | ---- | M] (Farbar) -- C:\Users\Roger\Desktop\FRST.exe

[2014/01/12 08:21:55 | 000,448,512 | ---- | M] (OldTimer Tools) -- C:\Users\Roger\Desktop\TFC.exe

[2014/01/10 15:06:04 | 001,037,068 | ---- | M] (Thisisu) -- C:\Users\Roger\Desktop\JRT.exe

[2014/01/10 14:27:24 | 001,233,962 | ---- | M] () -- C:\Users\Roger\Desktop\AdwCleaner.exe

[2014/01/09 14:51:33 | 000,000,167 | ---- | M] () -- C:\Windows\wininit.ini

[2014/01/01 15:25:09 | 000,000,528 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job

[2014/01/01 15:11:03 | 000,775,952 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys

[2014/01/01 15:11:03 | 000,180,248 | ---- | M] () -- C:\Windows\System32\drivers\aswVmm.sys

[2014/01/01 15:11:03 | 000,057,672 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys

[2014/01/01 15:11:02 | 000,410,528 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys

[2014/01/01 15:11:02 | 000,067,824 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys

[2014/01/01 15:11:02 | 000,054,832 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys

[2014/01/01 15:11:01 | 000,270,240 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe

[2014/01/01 15:11:01 | 000,043,152 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

[2013/12/30 09:33:57 | 000,001,746 | -H-- | M] () -- C:\Users\Roger\Documents\Default.rdp

[2013/12/14 15:05:56 | 404,156,080 | ---- | M] () -- C:\Windows\MEMORY.DMP

[2013/12/14 14:19:16 | 000,049,944 | ---- | M] () -- C:\Windows\System32\drivers\aswRvrt.sys

[2013/12/14 14:14:44 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt

[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

========== Files Created - No Company Name ==========

[2014/01/10 14:27:01 | 001,233,962 | ---- | C] () -- C:\Users\Roger\Desktop\AdwCleaner.exe

[2013/04/10 20:37:51 | 000,484,672 | ---- | C] () -- C:\Windows\SSndii.exe

[2013/04/10 20:29:15 | 000,024,064 | ---- | C] () -- C:\Windows\System32\sdb2xlm.dll

[2013/04/10 20:28:37 | 000,024,064 | ---- | C] () -- C:\Windows\System32\sdb2mlm.dll

[2013/04/02 21:00:04 | 000,000,000 | ---- | C] () -- C:\Windows\ViewNX2.INI

[2013/04/02 18:57:57 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Solid Colors

[2013/04/02 18:57:57 | 000,000,268 | RH-- | C] () -- C:\Users\Roger\AppData\Roaming\Scripts Menu

[2013/04/02 18:55:04 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Sound Effects

[2013/04/02 18:55:04 | 000,000,268 | RH-- | C] () -- C:\Users\Roger\AppData\Roaming\Services

[2013/04/02 18:55:02 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Smooth Strings

[2013/04/02 18:55:02 | 000,000,268 | RH-- | C] () -- C:\Users\Roger\AppData\Roaming\Screen Savers

[2013/04/02 18:53:51 | 000,000,268 | RH-- | C] () -- C:\ProgramData\Static Library

[2013/04/02 18:53:51 | 000,000,268 | RH-- | C] () -- C:\Users\Roger\AppData\Roaming\Sports

[2013/03/29 19:32:11 | 000,000,000 | ---- | C] () -- C:\Users\Roger\XBMC_PC.zip

[2013/03/27 20:39:50 | 000,003,745 | ---- | C] () -- C:\Users\Roger\.swfinfo

[2013/03/17 16:08:55 | 000,180,248 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys

[2013/03/17 16:08:53 | 000,049,944 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys

[2010/04/18 14:45:53 | 000,005,939 | ---- | C] () -- C:\Users\Roger\.recently-used.xbel

[2009/09/01 20:45:54 | 000,007,728 | ---- | C] () -- C:\Users\Roger\AppData\Local\d3d9caps.dat

[2009/06/20 14:54:24 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat

[2009/06/19 21:32:35 | 000,094,208 | ---- | C] () -- C:\Users\Roger\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009/06/19 20:03:58 | 000,000,258 | RHS- | C] () -- C:\ProgramData\ntuser.pol

========== ZeroAccess Check ==========

[2006/11/02 07:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2012/06/08 12:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/04/11 01:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/04/11 01:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== LOP Check ==========

[2012/06/10 14:22:40 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Amazon

[2013/12/14 15:02:27 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\AVAST Software

[2013/10/27 12:45:17 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Bitcasa

[2013/03/29 19:32:11 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\CocotronLibrary

[2013/08/17 14:15:10 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\com.bitcasa.Bitcasa

[2011/10/23 14:46:39 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\com.zoodles.3B7D4B2F97D0C2BDB13554D0687ECC70A3734EDD.1

[2014/01/01 15:24:55 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Copy

[2009/06/20 10:19:49 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Downloaded Installations

[2014/01/12 15:36:04 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Dropbox

[2013/12/30 14:45:25 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Eye-Fi

[2010/12/25 12:16:11 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Fisher-Price

[2010/04/18 14:45:53 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\gtk-2.0

[2011/11/12 19:46:26 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\HandBrake

[2014/01/11 12:39:13 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\IDM

[2009/06/28 17:52:42 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\InterVideo

[2009/09/28 19:24:23 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\iPodder

[2009/06/19 20:13:52 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Leadertech

[2010/09/15 05:46:22 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Lenovo

[2013/04/02 20:53:38 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Nikon

[2012/02/22 07:21:18 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\OverDrive

[2011/05/08 19:52:05 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\PCDr

[2011/04/18 19:14:14 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\PwrMgr

[2013/04/04 21:03:40 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Titanium

[2010/11/21 15:50:56 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\TweetDeckFast.FFF259DC0CE2657847BBB4AFF0E62062EFC56543.1

[2013/04/14 16:29:54 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Unified Remote

[2011/05/08 19:30:55 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\Update

[2014/01/11 12:35:28 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\uTorrent

[2011/03/13 19:04:17 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\WysePocketCloud

[2014/01/11 08:44:55 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\XBMC

[2013/03/27 20:37:58 | 000,000,000 | ---D | M] -- C:\Users\Roger\AppData\Roaming\XBMC.old

========== Purity Check ==========

< End of report >

tillerr · January 12, 2014

Here is Extras.Txt

OTL Extras logfile created on: 1/12/2014 3:19:40 PM - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Roger\Desktop

Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

2.97 Gb Total Physical Memory | 1.42 Gb Available Physical Memory | 47.94% Memory free

6.13 Gb Paging File | 4.24 Gb Available in Paging File | 69.13% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 286.86 Gb Total Space | 76.30 Gb Free Space | 26.60% Space Free | Partition Type: NTFS

Drive F: | 931.51 Gb Total Space | 239.06 Gb Free Space | 25.66% Space Free | Partition Type: NTFS

Drive I: | 8.589935E9 Gb Total Space | 8.589935E9 Gb Free Space | 100.00% Space Free | Partition Type: Bitcasa

Drive Q: | 9.77 Gb Total Space | 2.50 Gb Free Space | 25.65% Space Free | Partition Type: NTFS

Drive S: | 1.46 Gb Total Space | 0.69 Gb Free Space | 46.96% Space Free | Partition Type: NTFS

Computer Name: TILLER | User Name: Roger | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========

========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "C:\Program Files\Microsoft Office\Office\msohtmed.exe" /p %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

"DoNotAllowExceptions" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

"DoNotAllowExceptions" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Program Files\BitTorrent\bittorrent.exe" = C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01445DC9-D3B0-4561-88E0-B510D388E46D}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{04B83E80-E320-4B81-8531-7742362CB4C3}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{063198AF-DE58-4253-BF18-AAE328A7FC52}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{0806FA44-AC65-4634-9C56-AAF348D157CB}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{08466721-3C6E-44B4-90BD-615E75C72A0D}" = lport=138 | protocol=17 | dir=in | app=system |

"{08D8D0C6-962D-4BF2-8AE5-98F6BE301213}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{0B011F44-ED59-4DEA-9714-E21D454926D4}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{0BBE7807-D877-4215-986B-BC970CC56E8A}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{0C0A2483-E248-405F-B578-AF6C74215143}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{0D2D125E-FFFB-440A-82A2-ED41A56914D5}" = lport=10244 | protocol=6 | dir=in | app=system |

"{0D422D8A-F3C5-42F5-BC78-BA205D78D175}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{0E4E3854-0F1F-4871-BBF4-57C0CD15CBAE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{0FE05456-FD35-4907-8288-2497A6907428}" = lport=3390 | protocol=6 | dir=in | app=system |

"{0FEFE453-EA36-4224-BFD8-E903D1BF2230}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{101E3E1D-A062-464C-99D5-906C46CABA0F}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{10AC758E-C77A-4869-AC39-099320958F57}" = lport=2869 | protocol=6 | dir=in | app=system |

"{129C3D2D-1C80-49BF-8B86-1FB589A7BE49}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{164219FB-8AF0-40E3-91C4-18D9A4F0C792}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{17A5ADD9-F148-4FC2-9A07-0E592EE43FD4}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{192C446B-D991-46BF-882F-FB07051B21D4}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{19F9DBFC-3904-4139-8DF4-72EC8D03AD81}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{1A602333-6DDD-40DC-A809-946E64A3F51C}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{1AC95EC8-0A6B-40F2-86D9-DFED34BAEBEF}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{1E1225D4-92FF-4792-9E4F-2017B272B528}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{208E9980-B919-4AF1-8169-BA05AE616E90}" = rport=10243 | protocol=6 | dir=out | app=system |

"{22FF36F4-7E50-4FA3-AD3D-E99D90E2E3AB}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |

"{26A9558A-8CD8-48B8-ABB5-52BB2747586D}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{2B75732F-DBC8-4C00-AEA3-7D8F9E3B5B8B}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{2C61B57A-524D-479C-BAF8-0B0D9D221E4E}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{2E1AB022-D37E-4D4D-98EB-A9D56C363FB2}" = lport=3390 | protocol=6 | dir=in | app=system |

"{2FC2151C-9EF0-4BCE-A77B-A186E5879AFB}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{30B6B2DB-D27D-4EE8-83F8-133A02370689}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{32C8AD27-657C-45D1-AB4D-AEC4EE38316F}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{3415D220-D1C6-4847-988A-D5FF51BF3DF3}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{349AEE01-4698-4583-9849-A0C1576DBD4C}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{3546D4CE-B259-4E25-8DCF-FB9B2F8F484E}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{35CC29C8-7B8A-481A-9BA8-7115E9DFE92C}" = lport=554 | protocol=6 | dir=in | app=%systemroot%\ehome\ehshell.exe |

"{37352899-0C06-4DAE-9187-8C4F967E5A87}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{3838EDD5-3007-444F-AB80-DCA4E759D4AD}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{3934A552-85D6-40CB-AC66-FB28A7C405FD}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{3ABDFE3B-B58C-4B96-AAD2-C61964AC68E1}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{3C058D80-9231-4312-88DE-3DA43D8C20C2}" = lport=139 | protocol=6 | dir=in | app=system |

"{410CEC47-9048-493B-A405-0EB8189FBE46}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{413280F4-2654-458D-84E4-C1E0E71F7F7B}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{41A83470-B5D0-4C26-B86C-1917B14D54BE}" = lport=64907 | protocol=6 | dir=in | name=webguide |

"{41DF9F95-BDF9-4AAC-9C39-AB5505778404}" = lport=2869 | protocol=6 | dir=in | app=system |

"{420D6C7D-2CAC-4209-A23B-F6FFB7F432B0}" = lport=445 | protocol=6 | dir=in | app=system |

"{42880C23-C5D6-4C95-96FF-DFC43C45A629}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{435983DD-695D-43F7-8668-09ADAF0AB19E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

"{44183754-A7A2-4276-9837-8987C2E4D7A4}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{46DEBACB-E2B5-4AF0-808D-0F1751E61C9D}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{47F4F421-5C4D-455C-9ED4-F6A5158B8028}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{486D3483-44F5-4B65-9C60-AF7A3120703E}" = lport=10243 | protocol=6 | dir=in | app=system |

"{495DE28B-4C27-42B9-8767-15184244DB53}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{49E53204-1A24-4B6E-8E27-DCDF26BFCDEC}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{49EBDAFE-A35E-4355-9314-7ABFBB3B1E3E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{4DA74872-05A7-4A92-9AAE-9F62B02C89D7}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{4E181410-6D68-4412-8520-531FB4A1D10C}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{5021CF3C-1004-49CC-91B5-C90E2608A056}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{508B1F9A-DAE4-4673-9963-B39AB89594F7}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{55DD267F-0E24-4ACD-B9CA-BCBC43CB7EE4}" = rport=139 | protocol=6 | dir=out | app=system |

"{5972F23A-7782-4470-A1C6-723A180776E9}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{5B25C2BB-5F3B-4899-9149-491E126C69D3}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{5BE2668E-D215-4CA6-9EA6-6FA36B0109E1}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe |

"{5D92BBAA-16AE-4448-9A7D-205E5D152CD6}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{5DB41B7A-A01C-40F8-A632-4593A0B27B05}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{5E42A29A-BD95-4093-811C-9348FB5D78ED}" = rport=445 | protocol=6 | dir=out | app=system |

"{61CBE920-301D-4189-A262-C6ACBB689FD3}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{61E3E2F4-9A4C-4B00-83AE-26F5C314C931}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{64663AE4-06B5-4819-B30C-C07AB6B24803}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{65640D61-BB9C-47EE-9222-27FF16B03F82}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{656DBA68-64CA-438D-9BAA-FC01151685B9}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |

"{667F6FA0-AE19-49A0-B2F3-DC0DA925F4AC}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{6B83FB9C-A159-4748-9CBF-3ECACF2E09FF}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{7602CFFB-9A22-4DEC-8F5B-129BE9039C1C}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{778C3C99-F421-4546-989E-F2761494C3AE}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{785EA0FB-2A34-4791-9AD7-BDDF00FADB5F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |

"{7A6674A6-F3C5-450C-AB1B-65332966040B}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{7AA7A122-59EA-4FC7-A49C-5D6F74B31022}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |

"{7D52B8DC-BF62-4848-BCE5-FEC345F5A83D}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{7E459195-4A0C-4FB8-85ED-2B8A482432F0}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{7F7897BB-641B-4A9F-B395-2909E140494B}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{800B7F6F-1ECA-4DC7-B8E4-BF42CC5E8AA5}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |

"{8080036C-1350-473D-99BC-D85E3CE5B14A}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{80F7F14C-2135-4054-B10B-E06C0B3D67F0}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{84B67A33-D04F-4C0A-8BA5-36DE8CC4A370}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{88534BFF-FCAC-4B40-8409-24C2052B3E7D}" = lport=64908 | protocol=6 | dir=in | name=webguide |

"{88E16223-E1E3-4102-AEC3-12A8E50D386F}" = rport=10244 | protocol=6 | dir=out | app=system |

"{896C0F6D-5108-4E35-B6D7-78D795152F8A}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{8B821D99-C7E1-4FF1-ABE6-F9AB3D389EC6}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{8D3F2864-EE24-42CD-AF98-E00BA6CDCA84}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{9258EFE2-C260-422D-8F47-8485F5CE263A}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{97131DFF-72BC-485B-A34B-E4874F36E012}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{98BB8425-7A82-48B4-9FAA-1DD3FE957323}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{9C3DD3FC-BB78-4523-B6A5-899C60BB6A88}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{9E0BFE2A-FAE0-45F2-A91D-96359CBD386B}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{9F0D2D5C-D2E7-4129-8BEF-0075C847D4EB}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{9FA15BDD-3DBB-4888-99F1-64E21B1D9024}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{9FE0280E-37EE-4B58-9B38-77148E88C3F1}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{A040D405-B5FF-435F-B284-585820570097}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{A1D3ABA1-03E6-4701-AE2D-AE1B5367DEEC}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{A3CD9908-5B2F-45BB-98F0-8648E13FF9C3}" = rport=10244 | protocol=6 | dir=out | app=system |

"{A6E4BC99-DE9B-4B36-9CB3-37B07C2B5A61}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{A910856E-E004-45E2-8D62-A8923A857848}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{A982841A-CF6E-4784-AD43-9892F8E7B965}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{AD4A0EBB-0954-41B5-9B78-9B287D507006}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |

"{AEC686C9-4DD0-4715-8BAC-D3892D157876}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{B48455B0-03E6-4531-8807-211ED071AFF2}" = lport=137 | protocol=17 | dir=in | app=system |

"{B6A8AF9D-FF4A-4D19-9268-716EEE328E99}" = lport=10244 | protocol=6 | dir=in | app=system |

"{B8220890-F8C7-4F9F-94B2-8085C2BE59B3}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{B8354860-8EC6-4153-9BB9-86C53A561362}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{B9046743-20BD-4005-8AD5-03CDEE479B14}" = lport=7777 | protocol=17 | dir=in | app=%systemroot%\ehome\ehshell.exe |

"{B9ECE1ED-8FBC-4326-BCCA-450DA016DD8B}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{BD06AA94-F630-4BC5-BF26-9F4E2B7A9EC8}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{BD94BE61-EBCA-45C3-8F5F-F1A8CE3B151F}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{BDC9E04B-02B9-4D97-93DD-01667E67E9CB}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{BEFE775F-2D7A-473E-BD71-6C8CB016D2C7}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{BF4DD411-2FEF-4BAC-AE14-47626FE93C51}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{BFDE7B06-14D4-4545-9F2F-22CCF36F039B}" = lport=9083 | protocol=6 | dir=in | name=remote potato - 9083 inbound |

"{C03F2BB2-62DC-4EBE-BAA9-2AADA6E8C2AF}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{C0854B4D-85ED-4A50-B2E5-961F83A7CD7A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |

"{C2602F9C-58AF-4830-BD83-9119EF574930}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{C29B921A-F706-46CD-9324-65552FA2AED3}" = rport=138 | protocol=17 | dir=out | app=system |

"{C4AB31E5-D0F2-46FD-82B5-9E3F03D0B4F3}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe |

"{C5718F23-7D5B-4AEC-8063-AD204A6BDF29}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface |

"{C59A770C-A794-4AD0-BCD2-1E7CFB80BEE4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |

"{C8B2B228-C9B4-43C6-86EE-2F53F8577526}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{C8D57E6F-919D-46F6-B459-2E1ABDACBA02}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{C8F87595-B296-4DC9-8B68-29E82AC86FE1}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{C95A154D-E0AA-4F31-B8AA-A8310F5F3609}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{CA5D5995-3252-4EFE-9F0C-1533756FF333}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{CAD0E88E-1848-4982-ABFF-EB8F194A3718}" = rport=137 | protocol=17 | dir=out | app=system |

"{CB08DBF8-3B61-47EB-8DF4-03ED7FFD9131}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{CE2D8BDF-6DCF-4F5C-A2F0-1C767628D0FE}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{CFC4DE6B-512A-4D5F-8F83-B8F9CA7B2400}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{D06EE731-C6E6-4F2A-869E-8171A618DE02}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{D26DB16F-BB28-46F5-992A-CDAB0763B04F}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |

"{D672D11B-D533-44D5-821C-3CB7763D76D4}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{D72D1301-5207-4C17-A3B8-0CB0EDEF689B}" = lport=9081 | protocol=6 | dir=in | name=remote potato - 9081 inbound |

"{D92E4891-8BC4-4CB8-991C-DBD1C93B1E48}" = lport=9083 | protocol=6 | dir=out | name=remote potato - 9083 outbound |

"{D96F95ED-EDBA-4121-AD34-93B875406B45}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{DB1D7A5F-4C92-4C54-AB7E-4E9BE97C9154}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{E5424EA7-A1E6-493A-BF54-B08AAADFAEFF}" = lport=9082 | protocol=6 | dir=in | name=remote potato - 9082 inbound |

"{E8F0C859-F5D9-4E7C-A45E-58631B36DBF6}" = lport=1195 | protocol=6 | dir=in | name=akamai netsession interface |

"{EBF51E1E-640C-4AA0-AAE0-E071D295F291}" = lport=9082 | protocol=6 | dir=out | name=remote potato - 9082 outbound |

"{ED658F20-A923-4CB9-A53F-50ED4C1FB702}" = lport=9081 | protocol=6 | dir=out | name=remote potato - 9081 outbound |

"{F102708E-F801-4246-A120-8FF5F951C43E}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{F3823D0B-8F79-4D9A-AA75-AD8F5711FF76}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |

"{FCBF1CA1-6709-4E78-BEE1-2CD2500E0DF2}" = lport=9080 | protocol=6 | dir=in | name=remote potato - 9080 inbound |

"{FCE10D3D-5586-421E-807F-39E1DD7E3410}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |

"{FE13DF73-803E-44D3-A2BD-28F021C63A3C}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

"{FF20641A-C143-48FC-AA9D-9D45F6A8B33F}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01EC6B6A-9E61-48FA-B6D8-62DA3D230699}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |

"{020EE2D2-7EE5-4786-839A-463D4C9677CA}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{0356114B-2A63-4AC3-BF39-6910E01ADA4F}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{04297507-0C82-42AC-B28D-75C5DA208D62}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{08716638-50B0-410D-8B3E-10B295C59260}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |

"{0B749FB9-E953-4121-99A9-8EA789400FA4}" = protocol=6 | dir=in | app=c:\program files\dell\dell printer manager\cdas2pc\dell.cdas2pc.exe |

"{0C2BF434-F679-444A-8E94-45CBDE0BA2BD}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{0C41EA07-4C25-4D8C-BAF9-9783F29649E5}" = protocol=17 | dir=in | app=c:\program files\dell\dell printer manager\cdas2pc\dell.cdas2pc.exe |

"{10AEC473-B053-4EB9-B415-8A084FED4778}" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\utorrent\utorrent.exe |

"{1281AAA3-62B8-47CB-9597-A05D9D8EE214}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{168B90F1-A19C-43DB-8BE2-81CF02EA2F11}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{18D279D8-B9F3-4F2F-B5CF-1F5B914A81A7}" = protocol=17 | dir=in | app=c:\program files\dell\dell printer manager\dell.alert.exe |

"{1A08A71C-45E6-4034-AC91-72DF649D8A07}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |

"{1D3B59A5-6A86-4B38-90FE-84D2AC982F3D}" = protocol=17 | dir=in | app=c:\program files\dell\dell printer manager\dell.ordersupplies.exe |

"{1E7759E9-CC24-4032-9A8F-464ED03BB429}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |

"{1E9CC28F-0414-4174-A481-3DDB197B37BF}" = protocol=6 | dir=in | app=c:\program files\dell\dell b1160w mono laser printer\torder\uninstall.exe |

"{1F2ABF76-5A51-40A1-9DD8-04977AC28D00}" = protocol=6 | dir=in | app=c:\program files\dell\dell printer manager\dell.application.exe |

"{23014E81-E698-4279-8A47-D39ECC67F08D}" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe |

"{25B4F369-4356-4602-A195-10AB607EC143}" = protocol=6 | dir=in | app=c:\program files\google\drive\googledrivesync.exe |

"{2C76265F-B8DC-48FB-B7D0-6CB7EC6F537B}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{2F0B4D16-6701-450F-8FCB-7924AC2E359B}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{2F464487-26F9-4EE2-A94E-F10B0C60761F}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |

"{3284DF59-794E-465B-B68A-B820C0627AFF}" = protocol=6 | dir=in | app=c:\program files\dna\btdna.exe |

"{33747610-EA6D-44DB-984D-DF6D5F7DE701}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{3976418C-738C-4013-88E9-69AB4C4189E4}" = protocol=17 | dir=in | app=c:\users\roger\appdata\local\google\google talk plugin\googletalkplugin.exe |

"{39E47A98-31EA-4954-BEE3-F75B46FFA5AF}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |

"{3E928172-5940-45BD-AF7B-EED592BF5D43}" = protocol=6 | dir=in | app=c:\users\roger\appdata\local\google\google talk plugin\googletalkplugin.exe |

"{43809BD9-048C-4B94-B17A-B1318583AF11}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{4EF40DE0-0C5D-438A-93C5-44E3597BD616}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{50BA20B7-F2BB-498D-A82E-7386677ED62C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{535B2636-B459-43D8-833C-0256A20A4D07}" = protocol=17 | dir=in | app=c:\program files\ultidev\cassini web server for asp.net 2.0\ultidevcassinwebserver2a.exe |

"{54CFB0F1-F890-4FF8-8469-21B64FFF6714}" = dir=in | app=c:\program files\google\chrome remote desktop\30.0.1599.56\remoting_host.exe |

"{59A82978-EA2B-4A9F-9C2D-21935E8CF481}" = protocol=17 | dir=in | app=c:\program files\dna\btdna.exe |

"{5C084146-4877-41C6-927D-81F6663C2FFC}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{5C0970C4-1D37-4F9E-904E-15B169933C4E}" = protocol=6 | dir=in | app=c:\users\roger\appdata\local\google\chrome\application\chrome.exe |

"{66F4D1D2-11A1-4828-B0E5-34B6354439BA}" = protocol=6 | dir=out | svc=mcx2svc | app=%systemroot%\system32\svchost.exe |

"{6B50CC84-25A6-46D8-9E52-FE811D118223}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{6D182C32-0246-49DD-9B19-9DAF0D343C8F}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |

"{6D94D318-42B0-47F6-8DAE-AD2156207159}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |

"{6FE96375-CB4F-46BC-A013-5D2A14C00DA3}" = protocol=17 | dir=in | app=c:\users\roger\appdata\local\google\chrome\application\chrome.exe |

"{70237E3E-583D-4B9B-9D07-0FBE6AB332C6}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{73CD6815-E18B-473E-A092-D2044BB6EE52}" = protocol=6 | dir=out | app=%systemroot%\ehome\ehshell.exe |

"{75CD893F-7A1C-4492-865E-5792B689FD66}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{7D009A4D-93AB-4CDB-A6CD-6935EDF92444}" = protocol=17 | dir=in | app=c:\users\roger\appdata\local\google\google talk plugin\googletalkplugin.exe |

"{7F2F2F33-E7DF-4DC4-8BCC-FD07C966A79B}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{8255B915-B921-47C3-882B-5C79BB9BB9AD}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{82A57D04-1B3C-45B7-BCF2-D9CD03FE2213}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{88A9D2BB-7B7E-4426-B985-7A45A374EF4F}" = protocol=6 | dir=in | app=c:\program files\dell\dell printer manager\dell.alert.exe |

"{8CAB6029-04B2-4FE3-9B19-5C7D8DC6B2F1}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{8ECDD153-6263-41D4-A688-051FA2FF61D1}" = protocol=6 | dir=in | app=c:\program files\dell\dell printer manager\dell.ordersupplies.exe |

"{97027F7D-07E7-41C4-80DB-82E78EE5BD92}" = protocol=6 | dir=in | app=c:\windows\ehome\ehshell.exe |

"{9878D21F-719F-4920-8915-630955307B0F}" = protocol=17 | dir=in | app=c:\windows\ehome\ehshell.exe |

"{9C9036CD-B4F1-4B9D-BC04-28BA70DDB4BA}" = protocol=6 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe |

"{A0E0CCED-2631-4244-AA8D-CD36C12E5C48}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{A1F9D20E-E672-474D-8B76-88186E9D4C93}" = protocol=6 | dir=in | app=c:\program files\ultidev\cassini web server for asp.net 2.0\ultidevcassinwebserver2a.exe |

"{A3FF14BF-C8D5-4219-9771-18462EEEB930}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{AB8C3AC5-0726-4D98-94B6-36D603C0A464}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{ACD189BE-6DCF-4E0E-B183-A4B76F337C1E}" = protocol=6 | dir=in | app=c:\users\roger\appdata\local\google\google talk plugin\googletalkplugin.exe |

"{ACF70251-88B0-42D8-B371-3C6F98B3C5A2}" = protocol=6 | dir=out | app=system |

"{AF34E2F7-1330-4F44-9F0F-5553FA526F1C}" = protocol=17 | dir=in | app=c:\program files\dell\dell printer manager\uninstall.exe |

"{AF6A54D7-0ED5-4D68-B181-435CC8B981D1}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{B709E095-36DF-4E03-828E-05A723B1A5B1}" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\utorrent\utorrent.exe |

"{B9A0A145-E9FF-4B01-921B-CB0C51C3BF8F}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |

"{BB221A5E-D890-4329-9AD5-94FB0A63BC22}" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe |

"{BC944E5C-29C5-4456-81E9-2B17196DD0FD}" = protocol=17 | dir=in | app=c:\program files\dell\dell b1160w mono laser printer\torder\torder.exe |

"{BCFCB05E-EA6D-433C-8C7F-7E45CDDBF017}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{BDA0FBCC-1EB7-45ED-9362-2594E5A58550}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{C0AF8F43-0B30-4B92-8F06-9CB94B9A10A9}" = protocol=6 | dir=out | app=%systemroot%\ehome\mcx2prov.exe |

"{C1C54252-1CEA-4528-99E8-6A19AAAA43B6}" = protocol=6 | dir=in | app=c:\program files\dell\dell printer manager\uninstall.exe |

"{C40738B2-5CF4-4559-B854-561A878990E2}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{C55544F6-D340-402E-9A80-26605C196EB4}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{C9427300-5010-455E-AD41-CAEF508EE7F9}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |

"{C9D041A9-B298-4E5B-8BCB-96348E5E154F}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |

"{CA3C9041-9601-42E8-A377-C1B2106AF402}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{CAC094CA-5FB6-458D-AE13-2793DEDE3115}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{CF4DF273-FE20-4A78-86D5-2D71A6FC29FE}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |

"{CFA4B2DD-0B04-4F2F-8C68-AE0D72F93C83}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |

"{D10FE8B9-BE7B-40E6-B48C-5C5C0E5B17A9}" = protocol=6 | dir=in | app=c:\program files\dell\dell b1160w mono laser printer\torder\torder.exe |

"{D11FE0A6-C14D-4A0A-8EDF-79A7B05A3619}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{D1E58916-9A80-43E6-A394-F5C83A59E813}" = protocol=17 | dir=in | app=c:\program files\google\drive\googledrivesync.exe |

"{D68D5836-36A2-4F14-B512-F348DDF741EF}" = protocol=17 | dir=in | app=c:\program files\dell\dell printer manager\dell.application.exe |

"{DAB3EDA5-3614-467E-9867-472B6A9E9226}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{DE4DB614-B7AD-4857-BADE-2E6280B4A944}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |

"{E0D6B5F3-D68F-43AC-B68E-FA848AFBDAEC}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{E1AD6D67-51EA-4E3F-946E-C5634E893665}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |

"{E23A2EC6-CE8E-4C9E-86BC-045682D8100D}" = dir=in | app=c:\program files\skype\phone\skype.exe |

"{E44BDA31-E923-466E-90AF-015002819344}" = protocol=17 | dir=out | app=%systemroot%\ehome\ehshell.exe |

"{E63C4349-BF0B-4990-B36F-859C287852B9}" = protocol=17 | dir=in | app=c:\program files\common files\common desktop agent\cdasrv.exe |

"{EA7AAA80-DF83-4B1C-8914-6A84C907F9ED}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{F1BAE839-01FE-4910-945F-E28E31C9BCA2}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |

"{F959CD98-4497-4C54-91BD-AD49272E91B5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |

"{FD1B1324-FBFF-4BB5-AD1E-674219CDA10C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |

"{FDD3D233-F020-4594-B306-25A115E77BD8}" = protocol=17 | dir=in | app=c:\program files\dell\dell b1160w mono laser printer\torder\uninstall.exe |

"TCP Query User{0D1F5938-D40B-4724-A9E9-6B99D9BE4CD8}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |

"TCP Query User{149D223C-CB3E-488D-ACB2-561584DDFA69}C:\program files\xbmc\xbmc.exe" = protocol=6 | dir=in | app=c:\program files\xbmc\xbmc.exe |

"TCP Query User{17DED242-612D-4BA7-A010-15A9D4B130E5}C:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe |

"TCP Query User{1FE0F5DC-C4FF-44CD-9B7A-50A7CE06B9E1}C:\program files\eye-fi\helper\eyefihelper.exe" = protocol=6 | dir=in | app=c:\program files\eye-fi\helper\eyefihelper.exe |

"TCP Query User{2907007F-97E9-48FF-8B3A-5FBEF65A9730}C:\users\roger\appdata\roaming\copy\copyagent.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\copy\copyagent.exe |

"TCP Query User{2C6698F6-F773-4C47-B7BA-05C98C238BCC}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |

"TCP Query User{378F54B2-970F-4685-B845-7BA564FE8BC7}C:\users\roger\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\spotify\spotify.exe |

"TCP Query User{50B035EE-6B12-4783-B6A3-993582B792DE}C:\program files\unified remote\remoteserver.exe" = protocol=6 | dir=in | app=c:\program files\unified remote\remoteserver.exe |

"TCP Query User{5736B89D-7CEA-434F-BC4A-AA3C00E12C07}C:\program files\webguide\webguide4\bin\webguide_configuration.exe" = protocol=6 | dir=in | app=c:\program files\webguide\webguide4\bin\webguide_configuration.exe |

"TCP Query User{5DEC1AC4-FB84-491F-B1AA-F869D277846F}C:\program files\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files\bittorrent\bittorrent.exe |

"TCP Query User{643150EC-33EF-4687-AC94-2D3563006987}C:\users\roger\desktop\my mobile\mymobiler\mymobiler.exe" = protocol=6 | dir=in | app=c:\users\roger\desktop\my mobile\mymobiler\mymobiler.exe |

"TCP Query User{69B67E29-6BE6-4AA8-BECC-2DABDFF057A7}C:\users\roger\appdata\roaming\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\roaming\spotify\spotify.exe |

"TCP Query User{6B7C18BF-984C-4CAE-9947-E9B327358288}C:\program files\spotify\spotify.exe" = protocol=6 | dir=in | app=c:\program files\spotify\spotify.exe |

"TCP Query User{6FC7D96A-9D62-4163-9C6C-B9B1D7C3A531}C:\users\roger\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\local\akamai\netsession_win.exe |

"TCP Query User{702B1BF4-F726-41A9-93F3-DCE13689D32B}C:\users\roger\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\roger\program files\dna\btdna.exe |

"TCP Query User{7ABD9DAF-91BA-46FD-9737-743711BFEC5B}C:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |

"TCP Query User{9EC53930-EBC1-4156-879A-5322B83E65F8}C:\program files\mseven software\msecure\msecure.exe" = protocol=6 | dir=in | app=c:\program files\mseven software\msecure\msecure.exe |

"TCP Query User{AC07BCAB-A3C2-4032-8641-9CBBA39F9405}C:\windows\ehome\ehexthost.exe" = protocol=6 | dir=in | app=c:\windows\ehome\ehexthost.exe |

"TCP Query User{B1923CA7-1005-495F-80A2-5DB6DCCD3160}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

"TCP Query User{BEBBC317-2210-440D-A072-75E2ADFEE7C3}C:\program files\mseven software\msecure\msecure.exe" = protocol=6 | dir=in | app=c:\program files\mseven software\msecure\msecure.exe |

"TCP Query User{E25D391C-2182-4873-82F5-068CAE187340}C:\users\roger\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\roger\appdata\local\akamai\netsession_win.exe |

"TCP Query User{E317E1DA-1434-48A8-A49D-1D827E379F57}C:\program files\utorrent\utorrent.exe" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe |

"TCP Query User{E5963970-00F9-40EF-B163-71EB37D506A0}C:\program files\unified remote\remoteserver.exe" = protocol=6 | dir=in | app=c:\program files\unified remote\remoteserver.exe |

"TCP Query User{EAB259CF-8083-4E1E-8685-DDEBA13ADA9C}C:\program files\eye-fi\helper\eyefihelper.exe" = protocol=6 | dir=in | app=c:\program files\eye-fi\helper\eyefihelper.exe |

"TCP Query User{FBEBC0EE-7B4B-4A9C-88A1-9F32EB588F49}C:\users\roger\program files\dna\btdna.exe" = protocol=6 | dir=in | app=c:\users\roger\program files\dna\btdna.exe |

"UDP Query User{00E9A40F-93EB-4607-BC89-E90EF6FE89DB}C:\users\roger\appdata\roaming\copy\copyagent.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\copy\copyagent.exe |

"UDP Query User{02058C97-9A9E-4C48-9C75-57637A363AE4}C:\users\roger\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\roger\program files\dna\btdna.exe |

"UDP Query User{08FA9064-6458-4D26-9BAB-1482D1E43C54}C:\program files\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files\bittorrent\bittorrent.exe |

"UDP Query User{1BC6FEB8-28A0-4952-A59D-F4D0B69F2CC4}C:\program files\eye-fi\helper\eyefihelper.exe" = protocol=17 | dir=in | app=c:\program files\eye-fi\helper\eyefihelper.exe |

"UDP Query User{1BD8106D-BE12-487F-BCE2-D2A75C2AEFCF}C:\windows\ehome\ehexthost.exe" = protocol=17 | dir=in | app=c:\windows\ehome\ehexthost.exe |

"UDP Query User{3256C0C4-A79D-4456-8B3A-E1AAC704EBBA}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |

"UDP Query User{327C1638-7DD8-42B3-A945-0A6BC54F803C}C:\users\roger\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\local\akamai\netsession_win.exe |

"UDP Query User{3669E712-A1C1-4D5A-A572-68ED013B444C}C:\users\roger\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\spotify\spotify.exe |

"UDP Query User{418546BC-7096-4930-90E6-31898171A112}C:\users\roger\program files\dna\btdna.exe" = protocol=17 | dir=in | app=c:\users\roger\program files\dna\btdna.exe |

"UDP Query User{64BCBE0A-B5CE-46F8-9E34-2E8C7EF6490B}C:\program files\webguide\webguide4\bin\webguide_configuration.exe" = protocol=17 | dir=in | app=c:\program files\webguide\webguide4\bin\webguide_configuration.exe |

"UDP Query User{684408AA-D516-465F-8477-EF1C6EE4BAB7}C:\program files\mseven software\msecure\msecure.exe" = protocol=17 | dir=in | app=c:\program files\mseven software\msecure\msecure.exe |

"UDP Query User{778F7C0B-A2BF-4AD3-BA5C-0EB9244F0FC8}C:\program files\unified remote\remoteserver.exe" = protocol=17 | dir=in | app=c:\program files\unified remote\remoteserver.exe |

"UDP Query User{7FD80F0F-B87B-4F6C-A789-3003420AD205}C:\program files\xbmc\xbmc.exe" = protocol=17 | dir=in | app=c:\program files\xbmc\xbmc.exe |

"UDP Query User{8E91E996-3D33-4268-A883-8AC2CB71DBDE}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |

"UDP Query User{97440392-0B54-48D3-9AD6-62AC08689E8E}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe |

"UDP Query User{97F1859A-604C-4743-AF66-BC7EB67515AF}C:\program files\mseven software\msecure\msecure.exe" = protocol=17 | dir=in | app=c:\program files\mseven software\msecure\msecure.exe |

"UDP Query User{B85EBF7F-4AEC-4953-9EF5-F7363403FBE5}C:\users\roger\appdata\roaming\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\spotify\spotify.exe |

"UDP Query User{BA1F34A6-54FA-49EA-9CCE-A2950E64810D}C:\program files\utorrent\utorrent.exe" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe |

"UDP Query User{BC86331A-1E1A-4AC7-A800-D7A4C99AD3C1}C:\users\roger\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\local\akamai\netsession_win.exe |

"UDP Query User{BD4E18FE-9B51-409D-BBFC-D87DA2A3E25A}C:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\roger\appdata\roaming\dropbox\bin\dropbox.exe |

"UDP Query User{D0182AED-BFF7-410F-91BF-61A5272AAF8C}C:\users\roger\desktop\my mobile\mymobiler\mymobiler.exe" = protocol=17 | dir=in | app=c:\users\roger\desktop\my mobile\mymobiler\mymobiler.exe |

"UDP Query User{E4AFD252-1C36-410A-98BB-1B8D6114D9C1}C:\program files\eye-fi\helper\eyefihelper.exe" = protocol=17 | dir=in | app=c:\program files\eye-fi\helper\eyefihelper.exe |

"UDP Query User{EB510124-2F29-4C85-912B-5F5231F86E76}C:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=c:\program files\videolan\vlc\vlc.exe |

"UDP Query User{EB62281C-D6D3-485D-B146-342355E0D9C8}C:\program files\unified remote\remoteserver.exe" = protocol=17 | dir=in | app=c:\program files\unified remote\remoteserver.exe |

"UDP Query User{F955B1FA-AE23-45A4-A02E-129F05DB6B20}C:\program files\spotify\spotify.exe" = protocol=17 | dir=in | app=c:\program files\spotify\spotify.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00010409-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Professional

"{002FBC80-F076-4442-7C29-F92FF8934B16}" = Zoodles

"{02E89EFC-7B07-4D5A-AA03-9EC0902914EE}" = VC 9.0 Runtime

"{055B9AD2-48E1-462E-9992-814123063C46}" = Lenovo_ATK_Package

"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Central Data

"{098122AB-C605-4853-B441-C0A4EB359B75}" = DirectXInstallService

"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended

"{0A5B39D2-7ED6-4779-BCC9-37F381139DB3}" = Adobe AIR

"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer

"{1007F41F-7D69-468E-8017-3849A5A973C2}" = ThinkVantage Technologies Welcome Message

"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1

"{1189955B-C6E8-4606-AE6C-CD64791DB544}" = Mobile Broadband Connect

"{1297C681-92D7-40EF-93BF-03F66EC5105C}" = ThinkPad EasyEject Utility

"{17CBC505-D1AE-459D-B445-3D2000A85842}" = ThinkPad UltraNav Utility

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{1C095AE6-74D9-47A3-9039-4F142BA7B319}" = Fisher-Price iXL - Cars 2

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Central Tools

"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{24C4A041-9136-43DB-8C26-3060FC8CFFF8}" = Fisher-Price iXL Computer Software

"{24E703E9-E16E-40E1-B5FB-2CC4B5A568FB}" = Fisher-Price iXL - Batman

"{24E92E7A-6848-4747-A3EA-3AAC0576BE52}" = Lenovo Patch Utility

"{26A24AE4-039D-4CA4-87B4-2F83217040FF}" = Java 7 Update 40

"{2758691A-2CDE-4942-A4AC-0E8F61FE2067}" = USB Video Driver

"{2A83AD05-56E6-3FBD-8752-B4143162EF59}" = Google Talk Plugin

"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)

"{2DBE349F-FF05-42FE-81A9-2B3A0EC22BBE}" = Common Desktop Agent

"{2F4C24E6-CBD4-4AAC-B56F-C9FD44DE5668}" = Drag-to-Disc

"{30E47417-B708-424E-B8B8-0C71EAE879FB}" = DIBS

"{353B1E6D-7073-4450-8C80-699BD8FCFB49}" = MTP Porting Kit

"{36E4EF40-F7AD-FF81-F8DD-A763DAD6CA2D}" = ATI Catalyst Install Manager

"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = Integrated Camera

"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3E68D2F8-0DF1-4EBD-9039-34FBAB4414B9}" = Unified Remote

"{3F963A06-7C18-4039-9789-9644B3266AE7}" = Verizon Wireless BroadbandAccess Self Activation

"{40247AAC-AB0D-449C-882F-90401C3351E8}" = UltiDev Cassini Web Server Explorer

"{415B2719-AD3A-4944-B404-C472DB6085B3}" = Cisco EAP-FAST Module

"{44E9D4C2-946C-4378-9354-558803C47A68}" = Client Security - Password Manager

"{46A84694-59EC-48F0-964C-7E76E9F8A2ED}" = ThinkVantage Active Protection System

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in

"{4AB5764A-3894-49A2-BAA8-C4665F74CD4C}" = Registry patch to improve USB device detection on resume from sleep for Windows Vista

"{4CBABDFD-49F8-47FD-BE7D-ECDE7270525A}" = Windows Live PIMT Platform

"{4D828D53-4443-45C6-86DE-23B1562107FE}" = ThinkVantage Access Connections

"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.6

"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies

"{537BF16E-7412-448C-95D8-846E85A1D817}" = Roxio Creator Small Business Edition

"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)

"{5523092E-13AA-4EED-8E18-255860F6D9DC}" = ThinkVantage Status Gadget

"{56D4499E-AC3E-4B8D-91C9-C700C148C44B}" = Google Drive

"{59F6A514-9813-47A3-948C-8A155460CC2A}" = RICOH R5C83x/84x Flash Media Controller Driver Ver.3.55.01

"{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}" = Nikon Movie Editor

"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{61AD15B2-50DB-4686-A739-14FE180D4429}" = Windows Live ID Sign-in Assistant

"{6280149E-EFF3-4F1B-BD43-5B7EDD6F620A}" = Lenovo Care Supplement

"{6421F085-1FAA-DE13-D02A-CFB412C522A4}" = Acrobat.com

"{653858CD-40DD-40EC-AAAD-E59570DB9B2B}" = Fisher-Price iXL - Handy Manny

"{65706020-7B6F-41F2-8047-FC69579E386A}" = Presentation Director

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3

"{668ACF05-E455-4932-A2D2-5822A8206FEB}" = Camera Center

"{669C7BD8-DAA2-49B6-966C-F1E2AAE6B17E}" = Cisco PEAP Module

"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE

"{69333A04-5134-40A5-A055-9166A7AA1EC8}" =

"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin

"{6A05FEDF-662E-46BF-8A25-010E3F1C9C69}" = Windows Live UX Platform Language Pack

"{6E6E7725-C7BC-4C39-8B3F-14B67331A120}" = Lenovo Patch Utility

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Central Audio

"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{7764F7B0-7225-4145-82B6-2AB4540D33A6}" = Eye-Fi Center 3.4

"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update

"{78D60475-4A33-42A3-AE48-42D1E487A088}" = Fisher-Price iXL - Green Lantern

"{7E4C16B8-8F76-4940-8505-98E93C00BF19}" = Rescue and Recovery

"{80956555-A512-4190-9CAD-B000C36D6B6B}" = Windows Live Messenger

"{82CA0A0C-A3EC-4167-B694-909205B2EDEC}" = muvee Plugin 1.0

"{83770D14-21B9-44B3-8689-F7B523F94560}" = Cisco LEAP Module

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{8485F313-4B62-42F3-ADD8-0DE34A4DDAEF}" = Thinkpad Wireless LAN Adapters Software (11a/b/g/n)

"{8675339C-128C-44DD-83BF-0A5D6ABD8297}" = System Update

"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

"{87441A59-5E64-4096-A170-14EFE67200C3}" = Picture Control Utility

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8A4DB1CA-8206-4ADC-805C-66ACF1611DA3}" = System Migration Assistant

"{8D337F77-BE7F-41A2-A7CB-D5A63FD7049B}" = Sonic CinePlayer Decoder Pack

"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT

"{8e9411dc-a75a-4829-a892-41b5cb72bd8a}" = Box Sync

"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system

"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile Device Center

"{90A40409-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components

"{90FABD40-E741-446F-839D-CEAE905D63BE}" = ThinkPad Mobility Center Customization

"{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}" = InterVideo WinDVD

"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{986F64DC-FF15-449D-998F-EE3BCEC6666A}" = Help Center

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9A781940-AC41-4D5E-8E1E-76A04B916FB9}" = Carbon

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9E896F0D-8C9D-4F82-A1A6-C55B7B6F5378}" = Fisher-Price iXL - Toy Story

"{A040AC77-C1AA-4CC9-8931-9F648AF178F6}" = VC 9.0 Runtime

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components

"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common

"{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.8)

"{AC76BA86-7AD7-5464-3428-800000000003}" = Spelling Dictionaries Support For Adobe Reader 8

"{B014EE44-9197-4513-9613-71E6EB1B514E}" = Nikon Message Center 2

"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0

"{B32C4059-6E7A-41EF-AD20-56DF1872B923}" = Business Contact Manager for Outlook 2007 SP2

"{B334D9AE-1393-423E-97C0-3BDC3360E692}" = Sonic Icons for Lenovo

"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy

"{B67BAFBA-4C9F-48FA-9496-933E3B255044}" = QuickTime

"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Central Copy

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call

"{BAB60329-1088-4995-89B2-AEB7125F0B7D}" = Fisher-Price iXL - Dinosaurs

"{C6FA39A7-26B1-480A-BC74-6D17531AC222}" = Access Help

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform

"{CEA070BF-5534-4E36-B4BE-2EB31CA5AD72}" = mSecure

"{CF52099A-3BEA-4C41-AEA8-1E190F04D737}" = Lenovo Care

"{CFF8B8E8-E086-4DE0-935F-FE22CAB54F80}" = Microsoft Search Enhancement Pack

"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones

"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005

"{D436F577-1695-4D2F-8B44-AC76C99E0002}" = Windows Live Photo Common

"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform

"{DAC01CEE-5BAE-42D5-81FC-B687E84E8405}" = Power Manager

"{DB71210F-8314-4AE3-B7A7-EBAF85BD30E9}" = Wallpapers

"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10

"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant

"{E64C137C-D0B7-467A-B47F-460AAB30F0A3}" = ViewNX 2

"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile Device Center Driver Update

"{E7084B89-69E0-46B3-A118-8F99D06988CD}" = Microsoft SQL Server VSS Writer

"{E7E836B8-4BDD-454F-82E6-5FEA17C83AD4}" = Message Center

"{E8A54984-9776-4283-ACE2-782BA850A1C0}" = Roxio Creator Small Business Edition

"{EB4DF488-AAEF-406F-A341-CB2AAA315B90}" = Windows Live Messenger

"{EC877639-07AB-495C-BFD1-D63AF9140810}" = Roxio Activation Module

"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Central Core

"{EDA09459-AD7D-4434-BA0C-647F6703EA12}_is1" = Bitcasa version 1.1.4.12

"{F00E501A-5299-A910-73B2-00E78E36C819}" = ATI MCE Encoder

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

"{F18DB86D-BC16-4E01-BCCE-63F62B931D82}" = InterVideo Register Manager

"{F5266D28-E0B2-4130-BFC5-EE155AD514DC}" = Apple Application Support

"{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0

"{F6C8DAED-8CC7-43FD-9DA4-1F629B873A17}" = UltiDev Cassini Web Server for ASP.NET 2.0

"{F7E1CA14-B39D-452A-960B-39423DDDD933}" = DriveImage XML (Private Edition)

"{FA62B4C2-6CFD-462F-9B59-68A730001AB3}" = Product Recovery Disc Burning Utility

"{FD331A3B-F7A5-4C31-B8D4-DF413C85AF7A}" = Message Center Plus

"{FE044230-9CA5-43F7-9B58-5AC5A28A1F33}" = Windows Live Essentials

"{FFCABB0F-EE1F-4232-A563-DF9567DEB52A}" = Chrome Remote Desktop Host

"3ivx MPEG-4 5.0.3" = 3ivx MPEG-4 5.0.3 (remove only)

"414DA9DB2E84AAFAD2D2715FD9BABFAB2D209FFD" = Windows Driver Package - Lenovo 1.44 (05/14/2008 1.44)

"69083DC58646DE46A09847A522A1CC487F918039" = Windows Driver Package - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)

"AC3Filter" = AC3Filter (remove only)

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0

"Adobe Shockwave Player" = Adobe Shockwave Player 11.6

"Amazon MP3 Downloader" = Amazon MP3 Downloader 1.0.17

"avast" = avast! Free Antivirus

"AviSynth" = AviSynth 2.5

"Business Contact Manager" = Business Contact Manager for Outlook 2007 SP2

"CNXT_AUDIO_HDA" = Conexant HD Audio

"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP

"com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Acrobat.com

"com.zoodles.3B7D4B2F97D0C2BDB13554D0687ECC70A3734EDD.1" = Zoodles

"DAO 3.5" = DAO 3.5

"Dell B1160w Mono Laser Printer" = Dell B1160w Mono Laser Printer

"Digital Editions" = Adobe Digital Editions

"Dipmon" = Registry Patch of Enabling Device Initiated Power Management(DIPM) on SATA for Windows Vista

"FPIRPOn" = Registry patch of Changing Timing of IDLE IRP by Finger Print Driver for Windows Vista

"HDMI" = Intel® Graphics Media Accelerator Driver

"InstallShield_{1C095AE6-74D9-47A3-9039-4F142BA7B319}" = Fisher-Price iXL - Cars 2

"InstallShield_{24C4A041-9136-43DB-8C26-3060FC8CFFF8}" = Fisher-Price iXL Computer Software

"InstallShield_{24E703E9-E16E-40E1-B5FB-2CC4B5A568FB}" = Fisher-Price iXL - Batman

"InstallShield_{653858CD-40DD-40EC-AAAD-E59570DB9B2B}" = Fisher-Price iXL - Handy Manny

"InstallShield_{78D60475-4A33-42A3-AE48-42D1E487A088}" = Fisher-Price iXL - Green Lantern

"InstallShield_{9E896F0D-8C9D-4F82-A1A6-C55B7B6F5378}" = Fisher-Price iXL - Toy Story

"InstallShield_{BAB60329-1088-4995-89B2-AEB7125F0B7D}" = Fisher-Price iXL - Dinosaurs

"Lenovo News-Shop" = Lenovo News-Shop

"Lenovo Registration" = Lenovo Registration

"Lenovo Welcome_is1" = Lenovo Welcome v1.0.24.3

"LENOVO.SMIIF" = Lenovo System Interface Driver

"LenovoAutoScrollUtility" = Lenovo Auto Scroll Utility

"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.75.0.1300

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Microsoft SQL Server 2005" = Microsoft SQL Server 2005

"OnScreenDisplay" = On Screen Display

"PC-Doctor for Windows" = Lenovo ThinkVantage Toolbox

"Picasa 3" = Picasa 3

"Power Management Driver" = ThinkPad Power Management Driver for SL Series

"Quicken Basic 2000" = Quicken Basic 2000

"SynTPDeinstKey" = ThinkPad UltraNav Driver

"ThinkPad FullScreen Magnifier" = ThinkPad FullScreen Magnifier

"USBPMon" = Registry patch for Windows Vista USB S3 PM Enablement

"VLC media player" = VLC media player 2.0.8

"WinImage" = WinImage

"WinLiveSuite" = Windows Live Essentials

"WinRAR archiver" = WinRAR 5.00 (32-bit)

"XBMCHUB Wizard" = XBMCHUB Wizard

"Xvid_is1" = Xvid 1.2.2 final uninstall

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2450559217-1565701889-1815041723-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"Akamai" = Akamai NetSession Interface

"Dropbox" = Dropbox

"Google Chrome" = Google Chrome

"Move Media Player" = Move Media Player

"MusicManager" = Music Manager

"optimizer_chrome" = Widevine Media Optimizer Chrome 6.0.0

"uTorrent" = µTorrent

"XBMC" = XBMC

========== Last 20 Event Log Errors ==========

[ Antivirus Events ]

Error - 7/28/2009 10:07:08 PM | Computer Name = Tiller | Source = avast! | ID = 33554522

Description =

[ Application Events ]

Error - 1/12/2014 9:19:45 AM | Computer Name = Tiller | Source = Application Error | ID = 1000

Description = Faulting application chrome.exe, version 31.0.1650.63, time stamp

0x529e8b45, faulting module sdb2mdu.dll, version 6.4.36.24, time stamp 0x50f04f6b,

exception code 0xc0000005, fault offset 0x0000a8c8, process id 0x1af8, application

start time 0x01cf0f98da73579b.

Error - 1/12/2014 12:11:39 PM | Computer Name = Tiller | Source = Windows Backup | ID = 4100

Description =

Error - 1/12/2014 12:22:34 PM | Computer Name = Tiller | Source = WinMgmt | ID = 10

Description =

Error - 1/12/2014 12:26:29 PM | Computer Name = Tiller | Source = Application Error | ID = 1000

Description = Faulting application chrome.exe, version 31.0.1650.63, time stamp

0x529e8b45, faulting module sdb2mdu.dll, version 6.4.36.24, time stamp 0x50f04f6b,

exception code 0xc0000005, fault offset 0x0000a8c8, process id 0x1860, application

start time 0x01cf0fb2f183f992.

Error - 1/12/2014 12:37:03 PM | Computer Name = Tiller | Source = WinMgmt | ID = 10

Description =

Error - 1/12/2014 12:43:37 PM | Computer Name = Tiller | Source = Application Error | ID = 1000

Description = Faulting application chrome.exe, version 31.0.1650.63, time stamp

0x529e8b45, faulting module sdb2mdu.dll, version 6.4.36.24, time stamp 0x50f04f6b,

exception code 0xc0000005, fault offset 0x0000a8c8, process id 0x11d4, application

start time 0x01cf0fb51c4c8a6a.

Error - 1/12/2014 2:00:24 PM | Computer Name = Tiller | Source = Perflib | ID = 1010

Description =

Error - 1/12/2014 2:00:29 PM | Computer Name = Tiller | Source = Perflib | ID = 1008

Description =

Error - 1/12/2014 2:00:52 PM | Computer Name = Tiller | Source = SideBySide | ID = 16842824

Description = Activation context generation failed for "C:\Program Files\Lenovo\Mobile

Broadband Connect\DetwanHw.exe".Error in manifest or policy file "C:\Program Files\Lenovo\Mobile

Broadband Connect\DetwanHw.exe" on line 9. The element trustinfo appears as a child

of element urn:schemas-microsoft-com:asm.v1^assembly which is not supported by

this version of Windows.

Error - 1/12/2014 4:16:31 PM | Computer Name = Tiller | Source = Application Hang | ID = 1002

Description = The program mbam.exe version 1.75.0.1 stopped interacting with Windows

and was closed. To see if more information about the problem is available, check

the problem history in the Problem Reports and Solutions control panel. Process

ID: 1360 Start Time: 01cf0fb5a97048fa Termination Time: 15

[ Lenovo-Message Center Plus/Admin Events ]

Error - 1/26/2010 10:49:59 PM | Computer Name = Tiller | Source = Lenovo-Message Center Plus/Admin | ID = 4

Description = The file C:\ProgramData\Lenovo\MessageCenterPlus\ServerRepository\temp\TOC.cab

does not have a Lenovo Digital Signature. The file will be deleted

Error - 6/24/2010 8:08:12 AM | Computer Name = Tiller | Source = Lenovo-Message Center Plus/Admin | ID = 4

Description = The file size of the downloaded file /TOC.cab is not the same as the

file size of the file on the server

Error - 6/24/2010 8:08:12 AM | Computer Name = Tiller | Source = Lenovo-Message Center Plus/Admin | ID = 4

Description = The file C:\ProgramData\Lenovo\MessageCenterPlus\ServerRepository\temp\xslt

does not have a Lenovo Digital Signature. The file will be deleted

Error - 8/31/2010 5:49:16 PM | Computer Name = Tiller | Source = Lenovo-Message Center Plus/Admin | ID = 2

Description = Object reference not set to an instance of an object. -> Exception